Oct 2 19:07:02.298731 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:07:02.298766 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:07:02.298782 kernel: BIOS-provided physical RAM map: Oct 2 19:07:02.298793 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:07:02.298804 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:07:02.298815 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:07:02.298831 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 19:07:02.298843 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 19:07:02.298868 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 19:07:02.298879 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:07:02.298890 kernel: NX (Execute Disable) protection: active Oct 2 19:07:02.298901 kernel: SMBIOS 2.7 present. Oct 2 19:07:02.298913 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 19:07:02.298925 kernel: Hypervisor detected: KVM Oct 2 19:07:02.299006 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:07:02.299022 kernel: kvm-clock: cpu 0, msr 4bf8a001, primary cpu clock Oct 2 19:07:02.299035 kernel: kvm-clock: using sched offset of 5906733465 cycles Oct 2 19:07:02.299049 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:07:02.299061 kernel: tsc: Detected 2499.994 MHz processor Oct 2 19:07:02.299074 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:07:02.299089 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:07:02.299101 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 19:07:02.299113 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:07:02.299124 kernel: Using GB pages for direct mapping Oct 2 19:07:02.299136 kernel: ACPI: Early table checksum verification disabled Oct 2 19:07:02.299148 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 19:07:02.299159 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 19:07:02.299171 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:07:02.299183 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 19:07:02.299197 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 19:07:02.299209 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:07:02.299221 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:07:02.299233 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 19:07:02.299245 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:07:02.299257 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 19:07:02.299269 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 19:07:02.299281 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:07:02.299297 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 19:07:02.299309 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 19:07:02.299321 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 19:07:02.299421 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 19:07:02.299435 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 19:07:02.299448 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 19:07:02.299461 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 19:07:02.299477 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 19:07:02.299490 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 19:07:02.299503 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 19:07:02.299515 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:07:02.299528 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:07:02.299541 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 19:07:02.299554 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 19:07:02.299567 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 19:07:02.299582 kernel: Zone ranges: Oct 2 19:07:02.299659 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:07:02.299675 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 19:07:02.299689 kernel: Normal empty Oct 2 19:07:02.299903 kernel: Movable zone start for each node Oct 2 19:07:02.299918 kernel: Early memory node ranges Oct 2 19:07:02.299932 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:07:02.299944 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 19:07:02.299991 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 19:07:02.300011 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:07:02.300025 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:07:02.300298 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 19:07:02.300315 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 19:07:02.300328 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:07:02.300341 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 19:07:02.300354 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:07:02.300367 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:07:02.300380 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:07:02.300397 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:07:02.300411 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:07:02.300424 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:07:02.300437 kernel: TSC deadline timer available Oct 2 19:07:02.300450 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:07:02.300463 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 19:07:02.300477 kernel: Booting paravirtualized kernel on KVM Oct 2 19:07:02.300490 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:07:02.300626 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:07:02.300649 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:07:02.300662 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:07:02.300675 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:07:02.300687 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 19:07:02.300701 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:07:02.300713 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:07:02.300725 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 19:07:02.300738 kernel: Policy zone: DMA32 Oct 2 19:07:02.300752 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:07:02.300770 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:07:02.300782 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:07:02.300796 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:07:02.300809 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:07:02.300822 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 19:07:02.300836 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:07:02.300950 kernel: Kernel/User page tables isolation: enabled Oct 2 19:07:02.300967 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:07:02.300984 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:07:02.300998 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:07:02.301094 kernel: rcu: RCU event tracing is enabled. Oct 2 19:07:02.301110 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:07:02.301124 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:07:02.301137 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:07:02.301149 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:07:02.301161 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:07:02.301173 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:07:02.301188 kernel: random: crng init done Oct 2 19:07:02.301201 kernel: Console: colour VGA+ 80x25 Oct 2 19:07:02.301405 kernel: printk: console [ttyS0] enabled Oct 2 19:07:02.301423 kernel: ACPI: Core revision 20210730 Oct 2 19:07:02.301437 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 19:07:02.301451 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:07:02.301464 kernel: x2apic enabled Oct 2 19:07:02.301478 kernel: Switched APIC routing to physical x2apic. Oct 2 19:07:02.301491 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 19:07:02.301508 kernel: Calibrating delay loop (skipped) preset value.. 4999.98 BogoMIPS (lpj=2499994) Oct 2 19:07:02.301520 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:07:02.301533 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:07:02.301547 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:07:02.301578 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:07:02.301594 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:07:02.301607 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:07:02.301622 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:07:02.301635 kernel: RETBleed: Vulnerable Oct 2 19:07:02.301647 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:07:02.301661 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:07:02.301675 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:07:02.301690 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:07:02.301704 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:07:02.301719 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:07:02.301732 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:07:02.301746 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 19:07:02.301757 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 19:07:02.301769 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:07:02.301785 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:07:02.301798 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:07:02.301812 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 19:07:02.301827 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:07:02.301842 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 19:07:02.301869 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 19:07:02.301881 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 19:07:02.301894 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 19:07:02.301904 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 19:07:02.301916 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 19:07:02.301929 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 19:07:02.301942 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:07:02.301958 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:07:02.302090 kernel: LSM: Security Framework initializing Oct 2 19:07:02.302106 kernel: SELinux: Initializing. Oct 2 19:07:02.302120 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:07:02.302174 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:07:02.302190 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:07:02.302204 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:07:02.302217 kernel: signal: max sigframe size: 3632 Oct 2 19:07:02.302231 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:07:02.302244 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:07:02.302262 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:07:02.302275 kernel: x86: Booting SMP configuration: Oct 2 19:07:02.302288 kernel: .... node #0, CPUs: #1 Oct 2 19:07:02.302301 kernel: kvm-clock: cpu 1, msr 4bf8a041, secondary cpu clock Oct 2 19:07:02.302314 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 19:07:02.302327 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 19:07:02.302342 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:07:02.302356 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:07:02.302370 kernel: smpboot: Max logical packages: 1 Oct 2 19:07:02.302388 kernel: smpboot: Total of 2 processors activated (9999.97 BogoMIPS) Oct 2 19:07:02.302401 kernel: devtmpfs: initialized Oct 2 19:07:02.302413 kernel: x86/mm: Memory block size: 128MB Oct 2 19:07:02.302427 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:07:02.302441 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:07:02.302455 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:07:02.302468 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:07:02.302481 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:07:02.302494 kernel: audit: type=2000 audit(1696273621.155:1): state=initialized audit_enabled=0 res=1 Oct 2 19:07:02.302509 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:07:02.302522 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:07:02.302535 kernel: cpuidle: using governor menu Oct 2 19:07:02.302548 kernel: ACPI: bus type PCI registered Oct 2 19:07:02.302561 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:07:02.302574 kernel: dca service started, version 1.12.1 Oct 2 19:07:02.302587 kernel: PCI: Using configuration type 1 for base access Oct 2 19:07:02.302600 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:07:02.302613 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:07:02.302628 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:07:02.302642 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:07:02.302655 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:07:02.302668 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:07:02.302681 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:07:02.302693 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:07:02.302706 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:07:02.302719 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:07:02.302733 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 19:07:02.302749 kernel: ACPI: Interpreter enabled Oct 2 19:07:02.302762 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:07:02.302775 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:07:02.302788 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:07:02.302801 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 19:07:02.302814 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:07:02.303033 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:07:02.303296 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:07:02.303320 kernel: acpiphp: Slot [3] registered Oct 2 19:07:02.303379 kernel: acpiphp: Slot [4] registered Oct 2 19:07:02.303392 kernel: acpiphp: Slot [5] registered Oct 2 19:07:02.303405 kernel: acpiphp: Slot [6] registered Oct 2 19:07:02.303418 kernel: acpiphp: Slot [7] registered Oct 2 19:07:02.303431 kernel: acpiphp: Slot [8] registered Oct 2 19:07:02.303444 kernel: acpiphp: Slot [9] registered Oct 2 19:07:02.303457 kernel: acpiphp: Slot [10] registered Oct 2 19:07:02.303473 kernel: acpiphp: Slot [11] registered Oct 2 19:07:02.303486 kernel: acpiphp: Slot [12] registered Oct 2 19:07:02.303500 kernel: acpiphp: Slot [13] registered Oct 2 19:07:02.303513 kernel: acpiphp: Slot [14] registered Oct 2 19:07:02.303525 kernel: acpiphp: Slot [15] registered Oct 2 19:07:02.303537 kernel: acpiphp: Slot [16] registered Oct 2 19:07:02.303550 kernel: acpiphp: Slot [17] registered Oct 2 19:07:02.303563 kernel: acpiphp: Slot [18] registered Oct 2 19:07:02.303576 kernel: acpiphp: Slot [19] registered Oct 2 19:07:02.303588 kernel: acpiphp: Slot [20] registered Oct 2 19:07:02.303604 kernel: acpiphp: Slot [21] registered Oct 2 19:07:02.303617 kernel: acpiphp: Slot [22] registered Oct 2 19:07:02.303629 kernel: acpiphp: Slot [23] registered Oct 2 19:07:02.303642 kernel: acpiphp: Slot [24] registered Oct 2 19:07:02.303655 kernel: acpiphp: Slot [25] registered Oct 2 19:07:02.303668 kernel: acpiphp: Slot [26] registered Oct 2 19:07:02.303681 kernel: acpiphp: Slot [27] registered Oct 2 19:07:02.303693 kernel: acpiphp: Slot [28] registered Oct 2 19:07:02.303706 kernel: acpiphp: Slot [29] registered Oct 2 19:07:02.303722 kernel: acpiphp: Slot [30] registered Oct 2 19:07:02.303735 kernel: acpiphp: Slot [31] registered Oct 2 19:07:02.303748 kernel: PCI host bridge to bus 0000:00 Oct 2 19:07:02.304012 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:07:02.304132 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:07:02.304245 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:07:02.304353 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:07:02.304460 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:07:02.304714 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:07:02.304871 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:07:02.305002 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 19:07:02.305130 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 19:07:02.305255 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 19:07:02.305736 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 19:07:02.305896 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 19:07:02.306029 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 19:07:02.306256 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 19:07:02.306511 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 19:07:02.306719 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 19:07:02.306976 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 19:07:02.307257 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 19:07:02.307472 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 19:07:02.307608 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:07:02.307745 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:07:02.307980 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 19:07:02.308258 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:07:02.308391 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 19:07:02.308411 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:07:02.308433 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:07:02.308449 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:07:02.308464 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:07:02.308479 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:07:02.308495 kernel: iommu: Default domain type: Translated Oct 2 19:07:02.308510 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:07:02.308638 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 19:07:02.308842 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:07:02.308991 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 19:07:02.309008 kernel: vgaarb: loaded Oct 2 19:07:02.309022 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:07:02.309036 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it> Oct 2 19:07:02.309050 kernel: PTP clock support registered Oct 2 19:07:02.309063 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:07:02.309076 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:07:02.309089 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:07:02.309102 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 19:07:02.309119 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 19:07:02.309132 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 19:07:02.309145 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:07:02.309158 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:07:02.309171 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:07:02.309184 kernel: pnp: PnP ACPI init Oct 2 19:07:02.309197 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:07:02.309210 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:07:02.309223 kernel: NET: Registered PF_INET protocol family Oct 2 19:07:02.309239 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:07:02.309252 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:07:02.309266 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:07:02.309278 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:07:02.309291 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:07:02.309303 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:07:02.309317 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:07:02.309331 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:07:02.309344 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:07:02.309360 kernel: NET: Registered PF_XDP protocol family Oct 2 19:07:02.309475 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:07:02.309594 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:07:02.309701 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:07:02.309807 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:07:02.309938 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:07:02.310061 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:07:02.310081 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:07:02.310095 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:07:02.310109 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 19:07:02.310123 kernel: clocksource: Switched to clocksource tsc Oct 2 19:07:02.310136 kernel: Initialise system trusted keyrings Oct 2 19:07:02.310149 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:07:02.310162 kernel: Key type asymmetric registered Oct 2 19:07:02.310174 kernel: Asymmetric key parser 'x509' registered Oct 2 19:07:02.310187 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:07:02.310203 kernel: io scheduler mq-deadline registered Oct 2 19:07:02.310216 kernel: io scheduler kyber registered Oct 2 19:07:02.310229 kernel: io scheduler bfq registered Oct 2 19:07:02.310242 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:07:02.310256 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:07:02.310268 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:07:02.310282 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:07:02.310295 kernel: i8042: Warning: Keylock active Oct 2 19:07:02.310308 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:07:02.310323 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:07:02.310446 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 19:07:02.310733 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 19:07:02.310865 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T19:07:01 UTC (1696273621) Oct 2 19:07:02.310979 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 19:07:02.310995 kernel: intel_pstate: CPU model not supported Oct 2 19:07:02.311009 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:07:02.311022 kernel: Segment Routing with IPv6 Oct 2 19:07:02.311040 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:07:02.311053 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:07:02.311067 kernel: Key type dns_resolver registered Oct 2 19:07:02.311080 kernel: IPI shorthand broadcast: enabled Oct 2 19:07:02.311093 kernel: sched_clock: Marking stable (633153299, 349117763)->(1299346845, -317075783) Oct 2 19:07:02.311106 kernel: registered taskstats version 1 Oct 2 19:07:02.311119 kernel: Loading compiled-in X.509 certificates Oct 2 19:07:02.311132 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:07:02.311146 kernel: Key type .fscrypt registered Oct 2 19:07:02.311161 kernel: Key type fscrypt-provisioning registered Oct 2 19:07:02.311174 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:07:02.311187 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:07:02.311200 kernel: ima: No architecture policies found Oct 2 19:07:02.311213 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:07:02.311226 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:07:02.311239 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:07:02.311253 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:07:02.311266 kernel: Run /init as init process Oct 2 19:07:02.311282 kernel: with arguments: Oct 2 19:07:02.311430 kernel: /init Oct 2 19:07:02.311445 kernel: with environment: Oct 2 19:07:02.311458 kernel: HOME=/ Oct 2 19:07:02.311471 kernel: TERM=linux Oct 2 19:07:02.311484 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:07:02.311501 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:07:02.311522 systemd[1]: Detected virtualization amazon. Oct 2 19:07:02.311536 systemd[1]: Detected architecture x86-64. Oct 2 19:07:02.311550 systemd[1]: Running in initrd. Oct 2 19:07:02.311564 systemd[1]: No hostname configured, using default hostname. Oct 2 19:07:02.311578 systemd[1]: Hostname set to <localhost>. Oct 2 19:07:02.311612 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:07:02.311629 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:07:02.311644 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:07:02.311658 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:07:02.311673 systemd[1]: Reached target cryptsetup.target. Oct 2 19:07:02.311687 systemd[1]: Reached target paths.target. Oct 2 19:07:02.311701 systemd[1]: Reached target slices.target. Oct 2 19:07:02.311714 systemd[1]: Reached target swap.target. Oct 2 19:07:02.311728 systemd[1]: Reached target timers.target. Oct 2 19:07:02.311746 systemd[1]: Listening on iscsid.socket. Oct 2 19:07:02.311760 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:07:02.311963 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:07:02.311980 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:07:02.311995 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:07:02.312065 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:07:02.312080 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:07:02.312095 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:07:02.312114 systemd[1]: Reached target sockets.target. Oct 2 19:07:02.312129 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:07:02.312143 systemd[1]: Finished network-cleanup.service. Oct 2 19:07:02.312158 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:07:02.312172 systemd[1]: Starting systemd-journald.service... Oct 2 19:07:02.312187 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:07:02.312202 systemd[1]: Starting systemd-resolved.service... Oct 2 19:07:02.312216 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:07:02.312237 systemd-journald[185]: Journal started Oct 2 19:07:02.312314 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2c1669a95714c6c93a42ae8ab24ba1) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:07:02.325880 systemd[1]: Started systemd-journald.service. Oct 2 19:07:02.321346 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 19:07:02.492496 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:07:02.492531 kernel: Bridge firewalling registered Oct 2 19:07:02.492550 kernel: SCSI subsystem initialized Oct 2 19:07:02.492566 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:07:02.492582 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:07:02.492603 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:07:02.373759 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 19:07:02.498261 kernel: audit: type=1130 audit(1696273622.491:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.428910 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 19:07:02.504950 kernel: audit: type=1130 audit(1696273622.498:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.475511 systemd-resolved[187]: Positive Trust Anchors: Oct 2 19:07:02.512434 kernel: audit: type=1130 audit(1696273622.505:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.475526 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:07:02.520074 kernel: audit: type=1130 audit(1696273622.511:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.475577 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:07:02.532075 kernel: audit: type=1130 audit(1696273622.519:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.479434 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 19:07:02.492964 systemd[1]: Started systemd-resolved.service. Oct 2 19:07:02.545504 kernel: audit: type=1130 audit(1696273622.532:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.505168 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:07:02.506415 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:07:02.512698 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:07:02.520385 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:07:02.534588 systemd[1]: Reached target nss-lookup.target. Oct 2 19:07:02.559516 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:07:02.565960 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:07:02.570330 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:07:02.601278 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:07:02.601000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.621630 kernel: audit: type=1130 audit(1696273622.601:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.622540 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:07:02.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.629658 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:07:02.643152 kernel: audit: type=1130 audit(1696273622.629:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.643180 kernel: audit: type=1130 audit(1696273622.636:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.644113 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:07:02.661866 dracut-cmdline[207]: dracut-dracut-053 Oct 2 19:07:02.664655 dracut-cmdline[207]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:07:02.749874 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:07:02.778880 kernel: iscsi: registered transport (tcp) Oct 2 19:07:02.823737 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:07:02.823804 kernel: QLogic iSCSI HBA Driver Oct 2 19:07:02.857254 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:07:02.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:02.860083 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:07:02.915888 kernel: raid6: avx512x4 gen() 16500 MB/s Oct 2 19:07:02.929867 kernel: raid6: avx512x4 xor() 8061 MB/s Oct 2 19:07:02.952879 kernel: raid6: avx512x2 gen() 5269 MB/s Oct 2 19:07:02.970934 kernel: raid6: avx512x2 xor() 6624 MB/s Oct 2 19:07:02.990882 kernel: raid6: avx512x1 gen() 5399 MB/s Oct 2 19:07:03.008877 kernel: raid6: avx512x1 xor() 18172 MB/s Oct 2 19:07:03.041891 kernel: raid6: avx2x4 gen() 15251 MB/s Oct 2 19:07:03.059881 kernel: raid6: avx2x4 xor() 2477 MB/s Oct 2 19:07:03.077888 kernel: raid6: avx2x2 gen() 15596 MB/s Oct 2 19:07:03.096202 kernel: raid6: avx2x2 xor() 9697 MB/s Oct 2 19:07:03.113917 kernel: raid6: avx2x1 gen() 6556 MB/s Oct 2 19:07:03.131878 kernel: raid6: avx2x1 xor() 13193 MB/s Oct 2 19:07:03.148881 kernel: raid6: sse2x4 gen() 7075 MB/s Oct 2 19:07:03.168878 kernel: raid6: sse2x4 xor() 2104 MB/s Oct 2 19:07:03.186955 kernel: raid6: sse2x2 gen() 6114 MB/s Oct 2 19:07:03.207891 kernel: raid6: sse2x2 xor() 3960 MB/s Oct 2 19:07:03.225881 kernel: raid6: sse2x1 gen() 4526 MB/s Oct 2 19:07:03.244156 kernel: raid6: sse2x1 xor() 4584 MB/s Oct 2 19:07:03.244230 kernel: raid6: using algorithm avx512x4 gen() 16500 MB/s Oct 2 19:07:03.244248 kernel: raid6: .... xor() 8061 MB/s, rmw enabled Oct 2 19:07:03.246324 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:07:03.260873 kernel: xor: automatically using best checksumming function avx Oct 2 19:07:03.375919 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:07:03.384811 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:07:03.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:03.387000 audit: BPF prog-id=7 op=LOAD Oct 2 19:07:03.387000 audit: BPF prog-id=8 op=LOAD Oct 2 19:07:03.388087 systemd[1]: Starting systemd-udevd.service... Oct 2 19:07:03.416709 systemd-udevd[384]: Using default interface naming scheme 'v252'. Oct 2 19:07:03.425445 systemd[1]: Started systemd-udevd.service. Oct 2 19:07:03.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:03.427730 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:07:03.455728 dracut-pre-trigger[388]: rd.md=0: removing MD RAID activation Oct 2 19:07:03.504526 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:07:03.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:03.507095 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:07:03.596202 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:07:03.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:03.675865 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:07:03.683939 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:07:03.684188 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:07:03.697872 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 19:07:03.703371 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:07:03.703637 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:07:03.703657 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:07:03.709085 kernel: AES CTR mode by8 optimization enabled Oct 2 19:07:03.709146 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:94:ba:ee:cf:db Oct 2 19:07:03.717896 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:07:03.721872 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:07:03.721934 kernel: GPT:9289727 != 16777215 Oct 2 19:07:03.721955 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:07:03.721973 kernel: GPT:9289727 != 16777215 Oct 2 19:07:03.721990 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:07:03.722009 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:07:03.730087 (udev-worker)[438]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:07:03.982270 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (443) Oct 2 19:07:03.901463 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:07:03.998989 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:07:04.006690 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:07:04.016637 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:07:04.019242 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:07:04.027747 systemd[1]: Starting disk-uuid.service... Oct 2 19:07:04.036816 disk-uuid[584]: Primary Header is updated. Oct 2 19:07:04.036816 disk-uuid[584]: Secondary Entries is updated. Oct 2 19:07:04.036816 disk-uuid[584]: Secondary Header is updated. Oct 2 19:07:04.043865 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:07:04.048867 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:07:04.054951 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:07:05.053801 disk-uuid[585]: The operation has completed successfully. Oct 2 19:07:05.055355 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:07:05.197107 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:07:05.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.197220 systemd[1]: Finished disk-uuid.service. Oct 2 19:07:05.215507 systemd[1]: Starting verity-setup.service... Oct 2 19:07:05.244868 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:07:05.352663 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:07:05.362673 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:07:05.372902 systemd[1]: Finished verity-setup.service. Oct 2 19:07:05.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.488034 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:07:05.488797 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:07:05.489101 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:07:05.490252 systemd[1]: Starting ignition-setup.service... Oct 2 19:07:05.502012 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:07:05.522472 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:07:05.522540 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:07:05.522559 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:07:05.538872 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:07:05.556060 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:07:05.579065 systemd[1]: Finished ignition-setup.service. Oct 2 19:07:05.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.582039 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:07:05.607961 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:07:05.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.610000 audit: BPF prog-id=9 op=LOAD Oct 2 19:07:05.611505 systemd[1]: Starting systemd-networkd.service... Oct 2 19:07:05.643035 systemd-networkd[1097]: lo: Link UP Oct 2 19:07:05.643047 systemd-networkd[1097]: lo: Gained carrier Oct 2 19:07:05.644014 systemd-networkd[1097]: Enumeration completed Oct 2 19:07:05.644134 systemd[1]: Started systemd-networkd.service. Oct 2 19:07:05.644514 systemd-networkd[1097]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:07:05.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.657154 systemd[1]: Reached target network.target. Oct 2 19:07:05.666926 systemd-networkd[1097]: eth0: Link UP Oct 2 19:07:05.667091 systemd[1]: Starting iscsiuio.service... Oct 2 19:07:05.667104 systemd-networkd[1097]: eth0: Gained carrier Oct 2 19:07:05.680793 systemd[1]: Started iscsiuio.service. Oct 2 19:07:05.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.682294 systemd[1]: Starting iscsid.service... Oct 2 19:07:05.687266 iscsid[1102]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:07:05.687266 iscsid[1102]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.<reversed domain name>[:identifier]. Oct 2 19:07:05.687266 iscsid[1102]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:07:05.687266 iscsid[1102]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:07:05.687266 iscsid[1102]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:07:05.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.707057 iscsid[1102]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:07:05.688925 systemd[1]: Started iscsid.service. Oct 2 19:07:05.703453 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:07:05.720287 systemd-networkd[1097]: eth0: DHCPv4 address 172.31.27.122/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:07:05.725825 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:07:05.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:05.726066 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:07:05.730719 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:07:05.732187 systemd[1]: Reached target remote-fs.target. Oct 2 19:07:05.736481 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:07:05.748438 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:07:05.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.246344 ignition[1069]: Ignition 2.14.0 Oct 2 19:07:06.246360 ignition[1069]: Stage: fetch-offline Oct 2 19:07:06.246500 ignition[1069]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:07:06.246555 ignition[1069]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:07:06.271166 ignition[1069]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:07:06.271789 ignition[1069]: Ignition finished successfully Oct 2 19:07:06.276280 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:07:06.284587 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:07:06.284612 kernel: audit: type=1130 audit(1696273626.276:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.278441 systemd[1]: Starting ignition-fetch.service... Oct 2 19:07:06.295237 ignition[1121]: Ignition 2.14.0 Oct 2 19:07:06.295248 ignition[1121]: Stage: fetch Oct 2 19:07:06.295477 ignition[1121]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:07:06.295500 ignition[1121]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:07:06.303135 ignition[1121]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:07:06.304932 ignition[1121]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:07:06.312826 ignition[1121]: INFO : PUT result: OK Oct 2 19:07:06.315264 ignition[1121]: DEBUG : parsed url from cmdline: "" Oct 2 19:07:06.315264 ignition[1121]: INFO : no config URL provided Oct 2 19:07:06.315264 ignition[1121]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:07:06.319119 ignition[1121]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:07:06.319119 ignition[1121]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:07:06.319119 ignition[1121]: INFO : PUT result: OK Oct 2 19:07:06.319119 ignition[1121]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:07:06.324589 ignition[1121]: INFO : GET result: OK Oct 2 19:07:06.324589 ignition[1121]: DEBUG : parsing config with SHA512: eb7b613aa160cf011f38852162e26a5514d41f7f8d947e88819d68a72aa98b2a9c2250ea7935f15cbc1705fe8f4cb996a8cd8501c10d69452750e374ac23d132 Oct 2 19:07:06.343601 unknown[1121]: fetched base config from "system" Oct 2 19:07:06.344263 ignition[1121]: fetch: fetch complete Oct 2 19:07:06.343665 unknown[1121]: fetched base config from "system" Oct 2 19:07:06.344268 ignition[1121]: fetch: fetch passed Oct 2 19:07:06.343672 unknown[1121]: fetched user config from "aws" Oct 2 19:07:06.344403 ignition[1121]: Ignition finished successfully Oct 2 19:07:06.363275 kernel: audit: type=1130 audit(1696273626.356:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.348700 systemd[1]: Finished ignition-fetch.service. Oct 2 19:07:06.358564 systemd[1]: Starting ignition-kargs.service... Oct 2 19:07:06.382124 ignition[1127]: Ignition 2.14.0 Oct 2 19:07:06.382134 ignition[1127]: Stage: kargs Oct 2 19:07:06.382291 ignition[1127]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:07:06.382313 ignition[1127]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:07:06.393746 ignition[1127]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:07:06.395535 ignition[1127]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:07:06.397171 ignition[1127]: INFO : PUT result: OK Oct 2 19:07:06.400697 ignition[1127]: kargs: kargs passed Oct 2 19:07:06.400760 ignition[1127]: Ignition finished successfully Oct 2 19:07:06.403281 systemd[1]: Finished ignition-kargs.service. Oct 2 19:07:06.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.407912 systemd[1]: Starting ignition-disks.service... Oct 2 19:07:06.421988 kernel: audit: type=1130 audit(1696273626.406:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.428715 ignition[1133]: Ignition 2.14.0 Oct 2 19:07:06.428728 ignition[1133]: Stage: disks Oct 2 19:07:06.428983 ignition[1133]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:07:06.429013 ignition[1133]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:07:06.438759 ignition[1133]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:07:06.440249 ignition[1133]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:07:06.442199 ignition[1133]: INFO : PUT result: OK Oct 2 19:07:06.446692 ignition[1133]: disks: disks passed Oct 2 19:07:06.446832 ignition[1133]: Ignition finished successfully Oct 2 19:07:06.449214 systemd[1]: Finished ignition-disks.service. Oct 2 19:07:06.457135 kernel: audit: type=1130 audit(1696273626.450:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.450366 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:07:06.457169 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:07:06.458171 systemd[1]: Reached target local-fs.target. Oct 2 19:07:06.458237 systemd[1]: Reached target sysinit.target. Oct 2 19:07:06.461062 systemd[1]: Reached target basic.target. Oct 2 19:07:06.462276 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:07:06.497131 systemd-fsck[1141]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:07:06.501835 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:07:06.504671 systemd[1]: Mounting sysroot.mount... Oct 2 19:07:06.511879 kernel: audit: type=1130 audit(1696273626.503:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.520871 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:07:06.522411 systemd[1]: Mounted sysroot.mount. Oct 2 19:07:06.524619 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:07:06.536111 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:07:06.538453 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:07:06.538522 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:07:06.538562 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:07:06.548301 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:07:06.563499 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:07:06.567746 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:07:06.580883 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1158) Oct 2 19:07:06.584144 initrd-setup-root[1163]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:07:06.588738 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:07:06.588763 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:07:06.588774 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:07:06.591882 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:07:06.594279 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:07:06.597890 initrd-setup-root[1189]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:07:06.606039 initrd-setup-root[1197]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:07:06.619154 initrd-setup-root[1205]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:07:06.821302 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:07:06.823000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.837856 kernel: audit: type=1130 audit(1696273626.823:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.824128 systemd[1]: Starting ignition-mount.service... Oct 2 19:07:06.847353 systemd[1]: Starting sysroot-boot.service... Oct 2 19:07:06.850899 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:07:06.851038 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:07:06.890646 ignition[1224]: INFO : Ignition 2.14.0 Oct 2 19:07:06.891935 ignition[1224]: INFO : Stage: mount Oct 2 19:07:06.894929 systemd[1]: Finished sysroot-boot.service. Oct 2 19:07:06.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.901668 ignition[1224]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:07:06.901668 ignition[1224]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:07:06.906231 kernel: audit: type=1130 audit(1696273626.895:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.920349 ignition[1224]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:07:06.928346 ignition[1224]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:07:06.930616 ignition[1224]: INFO : PUT result: OK Oct 2 19:07:06.934051 ignition[1224]: INFO : mount: mount passed Oct 2 19:07:06.935026 ignition[1224]: INFO : Ignition finished successfully Oct 2 19:07:06.936704 systemd[1]: Finished ignition-mount.service. Oct 2 19:07:06.938259 systemd[1]: Starting ignition-files.service... Oct 2 19:07:06.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.944909 kernel: audit: type=1130 audit(1696273626.936:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:06.949440 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:07:06.961036 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1233) Oct 2 19:07:06.966813 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:07:06.966892 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:07:06.966922 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:07:06.974879 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:07:06.977625 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:07:07.000363 ignition[1252]: INFO : Ignition 2.14.0 Oct 2 19:07:07.000363 ignition[1252]: INFO : Stage: files Oct 2 19:07:07.002739 ignition[1252]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:07:07.002739 ignition[1252]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:07:07.013760 ignition[1252]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:07:07.015494 ignition[1252]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:07:07.017665 ignition[1252]: INFO : PUT result: OK Oct 2 19:07:07.022246 ignition[1252]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:07:07.027857 ignition[1252]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:07:07.027857 ignition[1252]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:07:07.044044 ignition[1252]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:07:07.051866 ignition[1252]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:07:07.056358 unknown[1252]: wrote ssh authorized keys file for user: core Oct 2 19:07:07.064155 ignition[1252]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:07:07.067605 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:07:07.075408 ignition[1252]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:07:07.242658 ignition[1252]: INFO : GET result: OK Oct 2 19:07:07.449140 systemd-networkd[1097]: eth0: Gained IPv6LL Oct 2 19:07:07.546560 ignition[1252]: DEBUG : file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:07:07.558626 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:07:07.558626 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:07:07.558626 ignition[1252]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:07:07.858312 ignition[1252]: INFO : GET result: OK Oct 2 19:07:08.062360 ignition[1252]: DEBUG : file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:07:08.066417 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:07:08.066417 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:07:08.066417 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:07:08.066417 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:07:08.066417 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:07:08.082196 ignition[1252]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3348279401" Oct 2 19:07:08.083783 ignition[1252]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3348279401": device or resource busy Oct 2 19:07:08.083783 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3348279401", trying btrfs: device or resource busy Oct 2 19:07:08.083783 ignition[1252]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3348279401" Oct 2 19:07:08.092719 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1252) Oct 2 19:07:08.092750 ignition[1252]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3348279401" Oct 2 19:07:08.099547 ignition[1252]: INFO : op(3): [started] unmounting "/mnt/oem3348279401" Oct 2 19:07:08.103177 systemd[1]: mnt-oem3348279401.mount: Deactivated successfully. Oct 2 19:07:08.107183 ignition[1252]: INFO : op(3): [finished] unmounting "/mnt/oem3348279401" Oct 2 19:07:08.108901 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:07:08.108901 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:07:08.108901 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:07:08.280764 ignition[1252]: INFO : GET result: OK Oct 2 19:07:09.443787 ignition[1252]: DEBUG : file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:07:09.446889 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:07:09.446889 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:07:09.446889 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:07:09.586393 ignition[1252]: INFO : GET result: OK Oct 2 19:07:11.846691 ignition[1252]: DEBUG : file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:07:11.849860 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:07:11.849860 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:07:11.849860 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:07:11.966115 ignition[1252]: INFO : GET result: OK Oct 2 19:07:12.947465 ignition[1252]: DEBUG : file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:07:12.950664 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:07:12.950664 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:07:12.950664 ignition[1252]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:07:13.053218 ignition[1252]: INFO : GET result: OK Oct 2 19:07:13.200503 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:07:13.200503 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:07:13.205457 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:07:13.205457 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:07:13.210129 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:07:13.212527 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:07:13.212527 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:07:13.221251 ignition[1252]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem797117894" Oct 2 19:07:13.224461 ignition[1252]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem797117894": device or resource busy Oct 2 19:07:13.224461 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem797117894", trying btrfs: device or resource busy Oct 2 19:07:13.224461 ignition[1252]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem797117894" Oct 2 19:07:13.245904 ignition[1252]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem797117894" Oct 2 19:07:13.245904 ignition[1252]: INFO : op(6): [started] unmounting "/mnt/oem797117894" Oct 2 19:07:13.245904 ignition[1252]: INFO : op(6): [finished] unmounting "/mnt/oem797117894" Oct 2 19:07:13.245904 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:07:13.245904 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:07:13.245904 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:07:13.239787 systemd[1]: mnt-oem797117894.mount: Deactivated successfully. Oct 2 19:07:13.270647 ignition[1252]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4253037939" Oct 2 19:07:13.272932 ignition[1252]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4253037939": device or resource busy Oct 2 19:07:13.272932 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4253037939", trying btrfs: device or resource busy Oct 2 19:07:13.272932 ignition[1252]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4253037939" Oct 2 19:07:13.278808 ignition[1252]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4253037939" Oct 2 19:07:13.278808 ignition[1252]: INFO : op(9): [started] unmounting "/mnt/oem4253037939" Oct 2 19:07:13.281821 ignition[1252]: INFO : op(9): [finished] unmounting "/mnt/oem4253037939" Oct 2 19:07:13.281821 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:07:13.281821 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:07:13.281821 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:07:13.294509 systemd[1]: mnt-oem4253037939.mount: Deactivated successfully. Oct 2 19:07:13.303492 ignition[1252]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2929769060" Oct 2 19:07:13.305366 ignition[1252]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2929769060": device or resource busy Oct 2 19:07:13.305366 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2929769060", trying btrfs: device or resource busy Oct 2 19:07:13.305366 ignition[1252]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2929769060" Oct 2 19:07:13.311524 ignition[1252]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2929769060" Oct 2 19:07:13.311524 ignition[1252]: INFO : op(c): [started] unmounting "/mnt/oem2929769060" Oct 2 19:07:13.311524 ignition[1252]: INFO : op(c): [finished] unmounting "/mnt/oem2929769060" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(12): [started] processing unit "nvidia.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(12): [finished] processing unit "nvidia.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(13): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(13): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:07:13.311524 ignition[1252]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(1b): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(1b): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(1c): [started] setting preset to enabled for "nvidia.service" Oct 2 19:07:13.361181 ignition[1252]: INFO : files: op(1c): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:07:13.387460 ignition[1252]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:07:13.389862 ignition[1252]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:07:13.389862 ignition[1252]: INFO : files: files passed Oct 2 19:07:13.389862 ignition[1252]: INFO : Ignition finished successfully Oct 2 19:07:13.397116 systemd[1]: Finished ignition-files.service. Oct 2 19:07:13.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.407875 kernel: audit: type=1130 audit(1696273633.396:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.411697 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:07:13.417968 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:07:13.424600 systemd[1]: Starting ignition-quench.service... Oct 2 19:07:13.433612 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:07:13.434865 systemd[1]: Finished ignition-quench.service. Oct 2 19:07:13.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.447533 initrd-setup-root-after-ignition[1277]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:07:13.456607 kernel: audit: type=1130 audit(1696273633.440:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.456654 kernel: audit: type=1131 audit(1696273633.441:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.448864 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:07:13.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.466630 kernel: audit: type=1130 audit(1696273633.456:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.456757 systemd[1]: Reached target ignition-complete.target. Oct 2 19:07:13.458010 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:07:13.482195 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:07:13.482327 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:07:13.494802 kernel: audit: type=1130 audit(1696273633.484:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.494843 kernel: audit: type=1131 audit(1696273633.484:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.484603 systemd[1]: Reached target initrd-fs.target. Oct 2 19:07:13.494908 systemd[1]: Reached target initrd.target. Oct 2 19:07:13.495974 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:07:13.497204 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:07:13.513427 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:07:13.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.517088 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:07:13.528996 kernel: audit: type=1130 audit(1696273633.515:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.537980 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:07:13.540081 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:07:13.542688 systemd[1]: Stopped target timers.target. Oct 2 19:07:13.544564 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:07:13.545890 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:07:13.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.548248 systemd[1]: Stopped target initrd.target. Oct 2 19:07:13.560823 kernel: audit: type=1131 audit(1696273633.547:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.562803 systemd[1]: Stopped target basic.target. Oct 2 19:07:13.564009 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:07:13.564833 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:07:13.569049 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:07:13.571526 systemd[1]: Stopped target remote-fs.target. Oct 2 19:07:13.573637 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:07:13.575566 systemd[1]: Stopped target sysinit.target. Oct 2 19:07:13.580599 systemd[1]: Stopped target local-fs.target. Oct 2 19:07:13.586214 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:07:13.588525 systemd[1]: Stopped target swap.target. Oct 2 19:07:13.591447 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:07:13.593124 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:07:13.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.595634 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:07:13.599943 kernel: audit: type=1131 audit(1696273633.594:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.601747 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:07:13.603138 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:07:13.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.605262 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:07:13.605459 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:07:13.613571 kernel: audit: type=1131 audit(1696273633.604:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.612602 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:07:13.612748 systemd[1]: Stopped ignition-files.service. Oct 2 19:07:13.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.615781 systemd[1]: Stopping ignition-mount.service... Oct 2 19:07:13.622809 systemd[1]: Stopping iscsiuio.service... Oct 2 19:07:13.629973 ignition[1290]: INFO : Ignition 2.14.0 Oct 2 19:07:13.631349 ignition[1290]: INFO : Stage: umount Oct 2 19:07:13.631349 ignition[1290]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:07:13.631349 ignition[1290]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:07:13.631369 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:07:13.634793 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:07:13.639178 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:07:13.642869 ignition[1290]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:07:13.642869 ignition[1290]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:07:13.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.645990 ignition[1290]: INFO : PUT result: OK Oct 2 19:07:13.647876 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:07:13.648000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.653014 ignition[1290]: INFO : umount: umount passed Oct 2 19:07:13.653014 ignition[1290]: INFO : Ignition finished successfully Oct 2 19:07:13.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.648115 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:07:13.651618 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:07:13.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.651740 systemd[1]: Stopped iscsiuio.service. Oct 2 19:07:13.657009 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:07:13.657125 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:07:13.667945 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:07:13.668000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.668061 systemd[1]: Stopped ignition-mount.service. Oct 2 19:07:13.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.669389 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:07:13.669451 systemd[1]: Stopped ignition-disks.service. Oct 2 19:07:13.670731 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:07:13.670787 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:07:13.672033 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:07:13.672071 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:07:13.675508 systemd[1]: Stopped target network.target. Oct 2 19:07:13.680636 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:07:13.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.680704 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:07:13.683075 systemd[1]: Stopped target paths.target. Oct 2 19:07:13.685402 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:07:13.686177 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:07:13.704285 systemd[1]: Stopped target slices.target. Oct 2 19:07:13.705395 systemd[1]: Stopped target sockets.target. Oct 2 19:07:13.706584 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:07:13.706615 systemd[1]: Closed iscsid.socket. Oct 2 19:07:13.707665 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:07:13.707708 systemd[1]: Closed iscsiuio.socket. Oct 2 19:07:13.708634 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:07:13.708679 systemd[1]: Stopped ignition-setup.service. Oct 2 19:07:13.710365 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:07:13.730218 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:07:13.733984 systemd-networkd[1097]: eth0: DHCPv6 lease lost Oct 2 19:07:13.736361 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:07:13.737763 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:07:13.740000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.741811 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:07:13.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.746000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:07:13.748000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.741931 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:07:13.751000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:07:13.743366 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:07:13.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.743401 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:07:13.745757 systemd[1]: Stopping network-cleanup.service... Oct 2 19:07:13.747958 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:07:13.748025 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:07:13.749616 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:07:13.749676 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:07:13.752540 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:07:13.752644 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:07:13.756059 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:07:13.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.763110 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:07:13.765161 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:07:13.775269 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:07:13.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.775352 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:07:13.779467 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:07:13.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.779592 systemd[1]: Stopped network-cleanup.service. Oct 2 19:07:13.784073 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:07:13.785371 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:07:13.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.788542 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:07:13.788597 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:07:13.790871 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:07:13.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.790933 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:07:13.792787 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:07:13.792845 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:07:13.792951 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:07:13.792992 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:07:13.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.793132 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:07:13.793170 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:07:13.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.798531 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:07:13.800295 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:07:13.800379 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:07:13.815006 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:07:13.815094 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:07:13.818327 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:07:13.818453 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:07:13.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:13.829287 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:07:13.830780 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:07:13.835509 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:07:13.841368 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:07:13.855199 systemd[1]: Switching root. Oct 2 19:07:13.880752 systemd-journald[185]: Journal stopped Oct 2 19:07:19.301840 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 19:07:19.302205 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:07:19.302238 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:07:19.302256 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:07:19.302274 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:07:19.302297 kernel: SELinux: policy capability open_perms=1 Oct 2 19:07:19.302316 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:07:19.302338 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:07:19.302360 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:07:19.302378 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:07:19.302396 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:07:19.302423 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:07:19.302442 systemd[1]: Successfully loaded SELinux policy in 117.888ms. Oct 2 19:07:19.302476 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 8.724ms. Oct 2 19:07:19.302497 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:07:19.302520 systemd[1]: Detected virtualization amazon. Oct 2 19:07:19.302539 systemd[1]: Detected architecture x86-64. Oct 2 19:07:19.302701 systemd[1]: Detected first boot. Oct 2 19:07:19.302722 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:07:19.302739 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:07:19.302757 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:07:19.302777 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:07:19.303538 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:07:19.303578 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 19:07:19.303598 kernel: audit: type=1334 audit(1696273638.942:86): prog-id=12 op=LOAD Oct 2 19:07:19.303616 kernel: audit: type=1334 audit(1696273638.942:87): prog-id=3 op=UNLOAD Oct 2 19:07:19.303635 kernel: audit: type=1334 audit(1696273638.944:88): prog-id=13 op=LOAD Oct 2 19:07:19.303653 kernel: audit: type=1334 audit(1696273638.945:89): prog-id=14 op=LOAD Oct 2 19:07:19.303673 kernel: audit: type=1334 audit(1696273638.945:90): prog-id=4 op=UNLOAD Oct 2 19:07:19.303690 kernel: audit: type=1334 audit(1696273638.945:91): prog-id=5 op=UNLOAD Oct 2 19:07:19.303709 kernel: audit: type=1131 audit(1696273638.947:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.303731 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:07:19.303749 systemd[1]: Stopped iscsid.service. Oct 2 19:07:19.303769 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:07:19.303787 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:07:19.303876 kernel: audit: type=1334 audit(1696273638.964:93): prog-id=12 op=UNLOAD Oct 2 19:07:19.303897 kernel: audit: type=1131 audit(1696273638.964:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.303917 kernel: audit: type=1130 audit(1696273638.976:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.303938 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:07:19.303963 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:07:19.303983 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:07:19.304002 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:07:19.304021 systemd[1]: Created slice system-getty.slice. Oct 2 19:07:19.304039 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:07:19.304058 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:07:19.304076 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:07:19.304098 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:07:19.304117 systemd[1]: Created slice user.slice. Oct 2 19:07:19.304137 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:07:19.304157 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:07:19.304175 systemd[1]: Set up automount boot.automount. Oct 2 19:07:19.304194 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:07:19.304214 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:07:19.304232 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:07:19.304252 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:07:19.304277 systemd[1]: Reached target integritysetup.target. Oct 2 19:07:19.304297 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:07:19.304318 systemd[1]: Reached target remote-fs.target. Oct 2 19:07:19.304340 systemd[1]: Reached target slices.target. Oct 2 19:07:19.304362 systemd[1]: Reached target swap.target. Oct 2 19:07:19.304386 systemd[1]: Reached target torcx.target. Oct 2 19:07:19.304414 systemd[1]: Reached target veritysetup.target. Oct 2 19:07:19.304439 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:07:19.304461 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:07:19.304483 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:07:19.304504 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:07:19.304525 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:07:19.304546 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:07:19.304567 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:07:19.304588 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:07:19.304612 systemd[1]: Mounting media.mount... Oct 2 19:07:19.304633 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:07:19.304653 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:07:19.304673 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:07:19.304696 systemd[1]: Mounting tmp.mount... Oct 2 19:07:19.304718 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:07:19.304738 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:07:19.304761 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:07:19.304782 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:07:19.304807 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:07:19.304829 systemd[1]: Starting modprobe@drm.service... Oct 2 19:07:19.304886 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:07:19.304946 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:07:19.304967 systemd[1]: Starting modprobe@loop.service... Oct 2 19:07:19.304989 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:07:19.305011 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:07:19.305031 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:07:19.305057 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:07:19.305078 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:07:19.305097 systemd[1]: Stopped systemd-journald.service. Oct 2 19:07:19.305120 systemd[1]: Starting systemd-journald.service... Oct 2 19:07:19.305144 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:07:19.305163 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:07:19.305181 kernel: loop: module loaded Oct 2 19:07:19.305200 kernel: fuse: init (API version 7.34) Oct 2 19:07:19.305217 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:07:19.305238 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:07:19.305261 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:07:19.305281 systemd[1]: Stopped verity-setup.service. Oct 2 19:07:19.305301 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:07:19.305320 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:07:19.305340 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:07:19.305361 systemd[1]: Mounted media.mount. Oct 2 19:07:19.305379 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:07:19.305399 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:07:19.305421 systemd[1]: Mounted tmp.mount. Oct 2 19:07:19.305443 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:07:19.305463 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:07:19.305482 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:07:19.305502 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:07:19.305537 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:07:19.305559 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:07:19.305581 systemd[1]: Finished modprobe@drm.service. Oct 2 19:07:19.305605 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:07:19.305624 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:07:19.305647 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:07:19.305672 systemd-journald[1400]: Journal started Oct 2 19:07:19.305753 systemd-journald[1400]: Runtime Journal (/run/log/journal/ec2c1669a95714c6c93a42ae8ab24ba1) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:07:14.460000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:07:19.310251 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:07:19.310302 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:07:14.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:07:14.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:07:14.604000 audit: BPF prog-id=10 op=LOAD Oct 2 19:07:14.604000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:07:14.604000 audit: BPF prog-id=11 op=LOAD Oct 2 19:07:14.604000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:07:18.942000 audit: BPF prog-id=12 op=LOAD Oct 2 19:07:18.942000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:07:18.944000 audit: BPF prog-id=13 op=LOAD Oct 2 19:07:18.945000 audit: BPF prog-id=14 op=LOAD Oct 2 19:07:18.945000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:07:18.945000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:07:18.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:18.964000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:07:18.964000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:18.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:18.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.193000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.197000 audit: BPF prog-id=15 op=LOAD Oct 2 19:07:19.197000 audit: BPF prog-id=16 op=LOAD Oct 2 19:07:19.197000 audit: BPF prog-id=17 op=LOAD Oct 2 19:07:19.197000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:07:19.197000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:07:19.243000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.312897 systemd[1]: Finished modprobe@loop.service. Oct 2 19:07:19.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.299000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:07:19.299000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffee5e6d220 a2=4000 a3=7ffee5e6d2bc items=0 ppid=1 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:19.321025 systemd[1]: Started systemd-journald.service. Oct 2 19:07:19.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.299000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:07:19.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:14.835180 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:07:18.941056 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:07:19.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:14.835876 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:07:18.948442 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:07:14.835906 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:07:19.318159 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:07:14.835950 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:07:19.321795 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:07:14.835967 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:07:19.323441 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:07:14.836013 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:07:19.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.325255 systemd[1]: Reached target network-pre.target. Oct 2 19:07:14.836033 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:07:14.836298 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:07:14.836420 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:07:14.836445 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:07:14.837119 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:07:14.837155 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:07:14.837175 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:07:19.328576 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:07:14.837190 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:07:14.837207 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:07:14.837220 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:14Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:07:18.327594 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:18Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:07:18.327977 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:18Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:07:18.328188 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:18Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:07:19.331241 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:07:18.328380 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:18Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:07:19.335225 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:07:18.328433 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:18Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:07:19.338012 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:07:18.328493 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:07:18Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:07:19.340760 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:07:19.342211 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:07:19.343965 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:07:19.345307 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:07:19.346929 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:07:19.353326 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:07:19.354969 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:07:19.378328 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:07:19.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.380170 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:07:19.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.381781 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:07:19.386690 systemd-journald[1400]: Time spent on flushing to /var/log/journal/ec2c1669a95714c6c93a42ae8ab24ba1 is 88.031ms for 1207 entries. Oct 2 19:07:19.386690 systemd-journald[1400]: System Journal (/var/log/journal/ec2c1669a95714c6c93a42ae8ab24ba1) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:07:19.485030 systemd-journald[1400]: Received client request to flush runtime journal. Oct 2 19:07:19.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.487000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.441100 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:07:19.444999 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:07:19.457634 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:07:19.488471 udevadm[1439]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:07:19.460783 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:07:19.486150 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:07:19.583028 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:07:19.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:19.586692 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:07:19.668470 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:07:19.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.204241 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:07:20.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.205000 audit: BPF prog-id=18 op=LOAD Oct 2 19:07:20.205000 audit: BPF prog-id=19 op=LOAD Oct 2 19:07:20.205000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:07:20.205000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:07:20.206956 systemd[1]: Starting systemd-udevd.service... Oct 2 19:07:20.229628 systemd-udevd[1443]: Using default interface naming scheme 'v252'. Oct 2 19:07:20.262094 systemd[1]: Started systemd-udevd.service. Oct 2 19:07:20.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.264000 audit: BPF prog-id=20 op=LOAD Oct 2 19:07:20.266041 systemd[1]: Starting systemd-networkd.service... Oct 2 19:07:20.275000 audit: BPF prog-id=21 op=LOAD Oct 2 19:07:20.275000 audit: BPF prog-id=22 op=LOAD Oct 2 19:07:20.275000 audit: BPF prog-id=23 op=LOAD Oct 2 19:07:20.279149 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:07:20.346072 systemd[1]: Started systemd-userdbd.service. Oct 2 19:07:20.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.368130 (udev-worker)[1452]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:07:20.371804 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:07:20.480884 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 19:07:20.488413 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:07:20.488526 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 Oct 2 19:07:20.490869 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 19:07:20.493000 audit[1446]: AVC avc: denied { confidentiality } for pid=1446 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:07:20.493000 audit[1446]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5565e6541400 a1=32194 a2=7f66ce6a2bc5 a3=5 items=106 ppid=1443 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:20.493000 audit: CWD cwd="/" Oct 2 19:07:20.493000 audit: PATH item=0 name=(null) inode=14523 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=1 name=(null) inode=14524 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=2 name=(null) inode=14523 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=3 name=(null) inode=14525 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=4 name=(null) inode=14523 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=5 name=(null) inode=14526 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=6 name=(null) inode=14526 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=7 name=(null) inode=14527 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=8 name=(null) inode=14526 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=9 name=(null) inode=14528 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=10 name=(null) inode=14526 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=11 name=(null) inode=14529 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=12 name=(null) inode=14526 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=13 name=(null) inode=14530 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=14 name=(null) inode=14526 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=15 name=(null) inode=14531 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=16 name=(null) inode=14523 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=17 name=(null) inode=14532 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=18 name=(null) inode=14532 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=19 name=(null) inode=14533 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=20 name=(null) inode=14532 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=21 name=(null) inode=14534 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=22 name=(null) inode=14532 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=23 name=(null) inode=14535 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=24 name=(null) inode=14532 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=25 name=(null) inode=14536 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=26 name=(null) inode=14532 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=27 name=(null) inode=14537 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=28 name=(null) inode=14523 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=29 name=(null) inode=14538 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=30 name=(null) inode=14538 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=31 name=(null) inode=14539 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=32 name=(null) inode=14538 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=33 name=(null) inode=14540 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=34 name=(null) inode=14538 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=35 name=(null) inode=14541 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=36 name=(null) inode=14538 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=37 name=(null) inode=14542 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=38 name=(null) inode=14538 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=39 name=(null) inode=14543 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=40 name=(null) inode=14523 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=41 name=(null) inode=14544 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=42 name=(null) inode=14544 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=43 name=(null) inode=14545 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=44 name=(null) inode=14544 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=45 name=(null) inode=14546 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=46 name=(null) inode=14544 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=47 name=(null) inode=14547 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=48 name=(null) inode=14544 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=49 name=(null) inode=14548 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=50 name=(null) inode=14544 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=51 name=(null) inode=14549 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=52 name=(null) inode=1039 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=53 name=(null) inode=14550 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=54 name=(null) inode=14550 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=55 name=(null) inode=14551 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=56 name=(null) inode=14550 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=57 name=(null) inode=14552 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=58 name=(null) inode=14550 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=59 name=(null) inode=14553 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=60 name=(null) inode=14553 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=61 name=(null) inode=14554 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=62 name=(null) inode=14553 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=63 name=(null) inode=14555 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=64 name=(null) inode=14553 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=65 name=(null) inode=14556 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=66 name=(null) inode=14553 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=67 name=(null) inode=14557 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=68 name=(null) inode=14553 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=69 name=(null) inode=14558 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=70 name=(null) inode=14550 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=71 name=(null) inode=14559 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=72 name=(null) inode=14559 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=73 name=(null) inode=14560 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=74 name=(null) inode=14559 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=75 name=(null) inode=14561 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=76 name=(null) inode=14559 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=77 name=(null) inode=14562 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=78 name=(null) inode=14559 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=79 name=(null) inode=14563 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=80 name=(null) inode=14559 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=81 name=(null) inode=14564 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=82 name=(null) inode=14550 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=83 name=(null) inode=14565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=84 name=(null) inode=14565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=85 name=(null) inode=14566 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=86 name=(null) inode=14565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=87 name=(null) inode=14567 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=88 name=(null) inode=14565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=89 name=(null) inode=14568 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=90 name=(null) inode=14565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=91 name=(null) inode=14569 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=92 name=(null) inode=14565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=93 name=(null) inode=14570 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=94 name=(null) inode=14550 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=95 name=(null) inode=14571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=96 name=(null) inode=14571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=97 name=(null) inode=14572 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=98 name=(null) inode=14571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=99 name=(null) inode=14573 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=100 name=(null) inode=14571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=101 name=(null) inode=14574 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=102 name=(null) inode=14571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=103 name=(null) inode=14575 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=104 name=(null) inode=14571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PATH item=105 name=(null) inode=14576 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:07:20.493000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:07:20.558528 systemd-networkd[1449]: lo: Link UP Oct 2 19:07:20.558539 systemd-networkd[1449]: lo: Gained carrier Oct 2 19:07:20.559132 systemd-networkd[1449]: Enumeration completed Oct 2 19:07:20.559270 systemd[1]: Started systemd-networkd.service. Oct 2 19:07:20.559277 systemd-networkd[1449]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:07:20.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.562358 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:07:20.567869 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:07:20.568186 systemd-networkd[1449]: eth0: Link UP Oct 2 19:07:20.568480 systemd-networkd[1449]: eth0: Gained carrier Oct 2 19:07:20.583957 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input5 Oct 2 19:07:20.584157 systemd-networkd[1449]: eth0: DHCPv4 address 172.31.27.122/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:07:20.590876 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 19:07:20.633929 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:07:20.651887 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1453) Oct 2 19:07:20.767659 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:07:20.872350 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:07:20.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.875228 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:07:20.898144 lvm[1557]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:07:20.926368 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:07:20.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.929724 systemd[1]: Reached target cryptsetup.target. Oct 2 19:07:20.931993 systemd[1]: Starting lvm2-activation.service... Oct 2 19:07:20.937084 lvm[1558]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:07:20.955066 systemd[1]: Finished lvm2-activation.service. Oct 2 19:07:20.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:20.956344 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:07:20.957493 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:07:20.957550 systemd[1]: Reached target local-fs.target. Oct 2 19:07:20.958659 systemd[1]: Reached target machines.target. Oct 2 19:07:20.962131 systemd[1]: Starting ldconfig.service... Oct 2 19:07:20.963518 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:07:20.963567 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:07:20.966651 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:07:20.974209 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:07:20.977600 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:07:20.978926 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:07:20.978991 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:07:20.980293 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:07:20.996591 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1560 (bootctl) Oct 2 19:07:20.998289 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:07:21.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.005212 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:07:21.007638 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:07:21.018827 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:07:21.022377 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:07:21.140875 systemd-fsck[1568]: fsck.fat 4.2 (2021-01-31) Oct 2 19:07:21.140875 systemd-fsck[1568]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 19:07:21.142577 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:07:21.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.145275 systemd[1]: Mounting boot.mount... Oct 2 19:07:21.162096 systemd[1]: Mounted boot.mount. Oct 2 19:07:21.184798 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:07:21.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.259463 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:07:21.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.262930 systemd[1]: Starting audit-rules.service... Oct 2 19:07:21.279000 audit: BPF prog-id=24 op=LOAD Oct 2 19:07:21.282000 audit: BPF prog-id=25 op=LOAD Oct 2 19:07:21.267321 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:07:21.271220 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:07:21.281283 systemd[1]: Starting systemd-resolved.service... Oct 2 19:07:21.284840 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:07:21.287657 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:07:21.301000 audit[1588]: SYSTEM_BOOT pid=1588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.312172 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:07:21.337834 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:07:21.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.339222 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:07:21.425989 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:07:21.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:21.429777 systemd[1]: Reached target time-set.target. Oct 2 19:07:21.482889 systemd-resolved[1585]: Positive Trust Anchors: Oct 2 19:07:21.483327 systemd-resolved[1585]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:07:21.483380 systemd-resolved[1585]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:07:21.545054 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:07:21.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:22.403201 systemd-timesyncd[1586]: Contacted time server 104.194.8.227:123 (0.flatcar.pool.ntp.org). Oct 2 19:07:22.403338 systemd-timesyncd[1586]: Initial clock synchronization to Mon 2023-10-02 19:07:22.403042 UTC. Oct 2 19:07:22.533000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:07:22.533000 audit[1605]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff82a353f0 a2=420 a3=0 items=0 ppid=1582 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:22.533000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:07:22.535678 augenrules[1605]: No rules Oct 2 19:07:22.535416 systemd[1]: Finished audit-rules.service. Oct 2 19:07:22.590553 systemd-resolved[1585]: Defaulting to hostname 'linux'. Oct 2 19:07:22.592807 systemd[1]: Started systemd-resolved.service. Oct 2 19:07:22.594122 systemd[1]: Reached target network.target. Oct 2 19:07:22.595238 systemd[1]: Reached target nss-lookup.target. Oct 2 19:07:22.632899 systemd-networkd[1449]: eth0: Gained IPv6LL Oct 2 19:07:22.635201 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:07:22.636964 systemd[1]: Reached target network-online.target. Oct 2 19:07:22.722646 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:07:22.723654 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:07:23.084139 ldconfig[1559]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:07:23.089291 systemd[1]: Finished ldconfig.service. Oct 2 19:07:23.091942 systemd[1]: Starting systemd-update-done.service... Oct 2 19:07:23.101271 systemd[1]: Finished systemd-update-done.service. Oct 2 19:07:23.102505 systemd[1]: Reached target sysinit.target. Oct 2 19:07:23.103699 systemd[1]: Started motdgen.path. Oct 2 19:07:23.104811 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:07:23.106547 systemd[1]: Started logrotate.timer. Oct 2 19:07:23.107931 systemd[1]: Started mdadm.timer. Oct 2 19:07:23.109296 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:07:23.110684 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:07:23.110737 systemd[1]: Reached target paths.target. Oct 2 19:07:23.111946 systemd[1]: Reached target timers.target. Oct 2 19:07:23.113340 systemd[1]: Listening on dbus.socket. Oct 2 19:07:23.115996 systemd[1]: Starting docker.socket... Oct 2 19:07:23.120287 systemd[1]: Listening on sshd.socket. Oct 2 19:07:23.121683 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:07:23.122304 systemd[1]: Listening on docker.socket. Oct 2 19:07:23.123378 systemd[1]: Reached target sockets.target. Oct 2 19:07:23.124791 systemd[1]: Reached target basic.target. Oct 2 19:07:23.125854 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:07:23.125880 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:07:23.126927 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:07:23.129337 systemd[1]: Starting containerd.service... Oct 2 19:07:23.132500 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:07:23.135116 systemd[1]: Starting dbus.service... Oct 2 19:07:23.137787 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:07:23.142095 systemd[1]: Starting extend-filesystems.service... Oct 2 19:07:23.143253 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:07:23.145453 systemd[1]: Starting motdgen.service... Oct 2 19:07:23.155211 systemd[1]: Started nvidia.service. Oct 2 19:07:23.158528 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:07:23.163567 systemd[1]: Starting prepare-critools.service... Oct 2 19:07:23.177992 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:07:23.185035 systemd[1]: Starting sshd-keygen.service... Oct 2 19:07:23.196080 systemd[1]: Starting systemd-logind.service... Oct 2 19:07:23.199042 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:07:23.199152 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:07:23.200159 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:07:23.201241 systemd[1]: Starting update-engine.service... Oct 2 19:07:23.208139 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:07:23.227511 jq[1629]: true Oct 2 19:07:23.238247 systemd[1]: Created slice system-sshd.slice. Oct 2 19:07:23.301440 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:07:23.346498 tar[1632]: crictl Oct 2 19:07:23.346838 jq[1618]: false Oct 2 19:07:23.347026 tar[1631]: ./ Oct 2 19:07:23.347026 tar[1631]: ./loopback Oct 2 19:07:23.302163 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:07:23.367623 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:07:23.367907 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:07:23.408388 dbus-daemon[1617]: [system] SELinux support is enabled Oct 2 19:07:23.408581 systemd[1]: Started dbus.service. Oct 2 19:07:23.412947 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:07:23.412977 systemd[1]: Reached target system-config.target. Oct 2 19:07:23.414398 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:07:23.414422 systemd[1]: Reached target user-config.target. Oct 2 19:07:23.461669 jq[1634]: true Oct 2 19:07:23.464721 dbus-daemon[1617]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1449 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:07:23.466819 dbus-daemon[1617]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:07:23.476329 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:07:23.525266 extend-filesystems[1619]: Found nvme0n1 Oct 2 19:07:23.570056 extend-filesystems[1619]: Found nvme0n1p1 Oct 2 19:07:23.573683 extend-filesystems[1619]: Found nvme0n1p2 Oct 2 19:07:23.573683 extend-filesystems[1619]: Found nvme0n1p3 Oct 2 19:07:23.573683 extend-filesystems[1619]: Found usr Oct 2 19:07:23.573683 extend-filesystems[1619]: Found nvme0n1p4 Oct 2 19:07:23.573683 extend-filesystems[1619]: Found nvme0n1p6 Oct 2 19:07:23.573683 extend-filesystems[1619]: Found nvme0n1p7 Oct 2 19:07:23.573683 extend-filesystems[1619]: Found nvme0n1p9 Oct 2 19:07:23.581601 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:07:23.616556 extend-filesystems[1619]: Checking size of /dev/nvme0n1p9 Oct 2 19:07:23.581828 systemd[1]: Finished motdgen.service. Oct 2 19:07:23.642369 extend-filesystems[1619]: Resized partition /dev/nvme0n1p9 Oct 2 19:07:23.666534 amazon-ssm-agent[1614]: 2023/10/02 19:07:23 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:07:23.669886 extend-filesystems[1680]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:07:23.675792 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:07:23.680101 amazon-ssm-agent[1614]: Initializing new seelog logger Oct 2 19:07:23.697208 amazon-ssm-agent[1614]: New Seelog Logger Creation Complete Oct 2 19:07:23.697973 amazon-ssm-agent[1614]: 2023/10/02 19:07:23 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:07:23.698625 amazon-ssm-agent[1614]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:07:23.700058 amazon-ssm-agent[1614]: 2023/10/02 19:07:23 processing appconfig overrides Oct 2 19:07:23.712244 update_engine[1628]: I1002 19:07:23.711117 1628 main.cc:92] Flatcar Update Engine starting Oct 2 19:07:23.726080 systemd[1]: Started update-engine.service. Oct 2 19:07:23.726573 update_engine[1628]: I1002 19:07:23.726455 1628 update_check_scheduler.cc:74] Next update check in 2m24s Oct 2 19:07:23.735736 systemd[1]: Started locksmithd.service. Oct 2 19:07:23.745792 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:07:23.783470 extend-filesystems[1680]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:07:23.783470 extend-filesystems[1680]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:07:23.783470 extend-filesystems[1680]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:07:23.804262 extend-filesystems[1619]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:07:23.805810 bash[1686]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:07:23.784170 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:07:23.784386 systemd[1]: Finished extend-filesystems.service. Oct 2 19:07:23.797629 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:07:23.811429 env[1638]: time="2023-10-02T19:07:23.811088075Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:07:23.877733 tar[1631]: ./bandwidth Oct 2 19:07:23.925245 env[1638]: time="2023-10-02T19:07:23.925192503Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:07:23.925404 env[1638]: time="2023-10-02T19:07:23.925381011Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:07:23.929392 systemd-logind[1626]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:07:23.929754 systemd-logind[1626]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 19:07:23.929885 systemd-logind[1626]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:07:23.934906 systemd-logind[1626]: New seat seat0. Oct 2 19:07:23.936499 env[1638]: time="2023-10-02T19:07:23.936447545Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:07:23.936596 env[1638]: time="2023-10-02T19:07:23.936498234Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:07:23.944795 systemd[1]: Started systemd-logind.service. Oct 2 19:07:24.006814 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.055150372Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.055214334Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.055237358Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.055269215Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.055501208Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.055945659Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.056184106Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.056210431Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.056294556Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:07:24.057078 env[1638]: time="2023-10-02T19:07:24.056327873Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:07:24.061584 env[1638]: time="2023-10-02T19:07:24.061543453Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:07:24.061687 env[1638]: time="2023-10-02T19:07:24.061592661Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:07:24.061687 env[1638]: time="2023-10-02T19:07:24.061612585Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:07:24.061687 env[1638]: time="2023-10-02T19:07:24.061674137Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061816 env[1638]: time="2023-10-02T19:07:24.061697122Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061816 env[1638]: time="2023-10-02T19:07:24.061783163Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061816 env[1638]: time="2023-10-02T19:07:24.061805269Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061932 env[1638]: time="2023-10-02T19:07:24.061828468Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061932 env[1638]: time="2023-10-02T19:07:24.061848948Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061932 env[1638]: time="2023-10-02T19:07:24.061869197Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061932 env[1638]: time="2023-10-02T19:07:24.061889110Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.061932 env[1638]: time="2023-10-02T19:07:24.061909682Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:07:24.062110 env[1638]: time="2023-10-02T19:07:24.062049812Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:07:24.062171 env[1638]: time="2023-10-02T19:07:24.062151704Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:07:24.062749 env[1638]: time="2023-10-02T19:07:24.062709866Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:07:24.062853 env[1638]: time="2023-10-02T19:07:24.062756032Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.062853 env[1638]: time="2023-10-02T19:07:24.062788312Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:07:24.063008 env[1638]: time="2023-10-02T19:07:24.062859772Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063008 env[1638]: time="2023-10-02T19:07:24.062881561Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063099 env[1638]: time="2023-10-02T19:07:24.063019577Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063099 env[1638]: time="2023-10-02T19:07:24.063041497Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063099 env[1638]: time="2023-10-02T19:07:24.063062053Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063099 env[1638]: time="2023-10-02T19:07:24.063081143Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063243 env[1638]: time="2023-10-02T19:07:24.063098607Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063243 env[1638]: time="2023-10-02T19:07:24.063117271Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063243 env[1638]: time="2023-10-02T19:07:24.063140454Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:07:24.063673 env[1638]: time="2023-10-02T19:07:24.063426518Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063673 env[1638]: time="2023-10-02T19:07:24.063454804Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063673 env[1638]: time="2023-10-02T19:07:24.063598382Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.063673 env[1638]: time="2023-10-02T19:07:24.063622853Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:07:24.063673 env[1638]: time="2023-10-02T19:07:24.063644388Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:07:24.063673 env[1638]: time="2023-10-02T19:07:24.063662784Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:07:24.063915 env[1638]: time="2023-10-02T19:07:24.063687523Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:07:24.063915 env[1638]: time="2023-10-02T19:07:24.063731490Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:07:24.064105 env[1638]: time="2023-10-02T19:07:24.064035503Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:07:24.066985 env[1638]: time="2023-10-02T19:07:24.064123273Z" level=info msg="Connect containerd service" Oct 2 19:07:24.066985 env[1638]: time="2023-10-02T19:07:24.064246380Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:07:24.066985 env[1638]: time="2023-10-02T19:07:24.065154752Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:07:24.066985 env[1638]: time="2023-10-02T19:07:24.065461784Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:07:24.066985 env[1638]: time="2023-10-02T19:07:24.065511561Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:07:24.065641 systemd[1]: Started containerd.service. Oct 2 19:07:24.067724 env[1638]: time="2023-10-02T19:07:24.067694984Z" level=info msg="containerd successfully booted in 0.311593s" Oct 2 19:07:24.068932 env[1638]: time="2023-10-02T19:07:24.068849305Z" level=info msg="Start subscribing containerd event" Oct 2 19:07:24.068996 env[1638]: time="2023-10-02T19:07:24.068965627Z" level=info msg="Start recovering state" Oct 2 19:07:24.069069 env[1638]: time="2023-10-02T19:07:24.069051189Z" level=info msg="Start event monitor" Oct 2 19:07:24.069113 env[1638]: time="2023-10-02T19:07:24.069091929Z" level=info msg="Start snapshots syncer" Oct 2 19:07:24.069113 env[1638]: time="2023-10-02T19:07:24.069107591Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:07:24.069196 env[1638]: time="2023-10-02T19:07:24.069124454Z" level=info msg="Start streaming server" Oct 2 19:07:24.127046 tar[1631]: ./ptp Oct 2 19:07:24.215757 dbus-daemon[1617]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:07:24.215944 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:07:24.227028 dbus-daemon[1617]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1660 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:07:24.233465 systemd[1]: Starting polkit.service... Oct 2 19:07:24.261575 polkitd[1759]: Started polkitd version 121 Oct 2 19:07:24.306021 polkitd[1759]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:07:24.306115 polkitd[1759]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:07:24.317355 polkitd[1759]: Finished loading, compiling and executing 2 rules Oct 2 19:07:24.318046 dbus-daemon[1617]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:07:24.318225 systemd[1]: Started polkit.service. Oct 2 19:07:24.320625 polkitd[1759]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:07:24.336978 systemd-hostnamed[1660]: Hostname set to <ip-172-31-27-122> (transient) Oct 2 19:07:24.337099 systemd-resolved[1585]: System hostname changed to 'ip-172-31-27-122'. Oct 2 19:07:24.406478 tar[1631]: ./vlan Oct 2 19:07:24.443259 coreos-metadata[1616]: Oct 02 19:07:24.443 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:07:24.461116 coreos-metadata[1616]: Oct 02 19:07:24.460 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:07:24.461620 coreos-metadata[1616]: Oct 02 19:07:24.461 INFO Fetch successful Oct 2 19:07:24.461813 coreos-metadata[1616]: Oct 02 19:07:24.461 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:07:24.462456 coreos-metadata[1616]: Oct 02 19:07:24.462 INFO Fetch successful Oct 2 19:07:24.464381 unknown[1616]: wrote ssh authorized keys file for user: core Oct 2 19:07:24.494138 update-ssh-keys[1791]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:07:24.494489 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:07:24.518034 amazon-ssm-agent[1614]: 2023-10-02 19:07:24 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-02a5b700d112f01d1 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-02a5b700d112f01d1 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:07:24.518034 amazon-ssm-agent[1614]: status code: 400, request id: 1b32f03a-cd31-4e5f-bcd2-fdf5fcc56070 Oct 2 19:07:24.518034 amazon-ssm-agent[1614]: 2023-10-02 19:07:24 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:07:24.586782 tar[1631]: ./host-device Oct 2 19:07:24.642738 tar[1631]: ./tuning Oct 2 19:07:24.689195 tar[1631]: ./vrf Oct 2 19:07:24.738153 tar[1631]: ./sbr Oct 2 19:07:24.787012 tar[1631]: ./tap Oct 2 19:07:24.845632 tar[1631]: ./dhcp Oct 2 19:07:25.032086 tar[1631]: ./static Oct 2 19:07:25.099642 tar[1631]: ./firewall Oct 2 19:07:25.185002 systemd[1]: Finished prepare-critools.service. Oct 2 19:07:25.218164 tar[1631]: ./macvlan Oct 2 19:07:25.284077 tar[1631]: ./dummy Oct 2 19:07:25.348690 tar[1631]: ./bridge Oct 2 19:07:25.423005 tar[1631]: ./ipvlan Oct 2 19:07:25.483556 tar[1631]: ./portmap Oct 2 19:07:25.538105 tar[1631]: ./host-local Oct 2 19:07:25.649336 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:07:25.699386 locksmithd[1692]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:07:25.973950 sshd_keygen[1654]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:07:26.003504 systemd[1]: Finished sshd-keygen.service. Oct 2 19:07:26.006724 systemd[1]: Starting issuegen.service... Oct 2 19:07:26.009650 systemd[1]: Started sshd@0-172.31.27.122:22-139.178.89.65:39630.service. Oct 2 19:07:26.019678 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:07:26.019848 systemd[1]: Finished issuegen.service. Oct 2 19:07:26.023992 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:07:26.038661 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:07:26.041580 systemd[1]: Started getty@tty1.service. Oct 2 19:07:26.045506 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:07:26.047171 systemd[1]: Reached target getty.target. Oct 2 19:07:26.048561 systemd[1]: Reached target multi-user.target. Oct 2 19:07:26.052277 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:07:26.070407 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:07:26.070637 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:07:26.072120 systemd[1]: Startup finished in 1.025s (kernel) + 12.410s (initrd) + 10.897s (userspace) = 24.333s. Oct 2 19:07:26.383552 sshd[1819]: Accepted publickey for core from 139.178.89.65 port 39630 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:07:26.386876 sshd[1819]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:26.409153 systemd[1]: Created slice user-500.slice. Oct 2 19:07:26.412667 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:07:26.418662 systemd-logind[1626]: New session 1 of user core. Oct 2 19:07:26.435652 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:07:26.439517 systemd[1]: Starting user@500.service... Oct 2 19:07:26.447916 (systemd)[1828]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:26.591358 systemd[1828]: Queued start job for default target default.target. Oct 2 19:07:26.592297 systemd[1828]: Reached target paths.target. Oct 2 19:07:26.592332 systemd[1828]: Reached target sockets.target. Oct 2 19:07:26.592351 systemd[1828]: Reached target timers.target. Oct 2 19:07:26.592368 systemd[1828]: Reached target basic.target. Oct 2 19:07:26.592426 systemd[1828]: Reached target default.target. Oct 2 19:07:26.592466 systemd[1828]: Startup finished in 130ms. Oct 2 19:07:26.592870 systemd[1]: Started user@500.service. Oct 2 19:07:26.594502 systemd[1]: Started session-1.scope. Oct 2 19:07:26.754068 systemd[1]: Started sshd@1-172.31.27.122:22-139.178.89.65:34120.service. Oct 2 19:07:26.921185 sshd[1837]: Accepted publickey for core from 139.178.89.65 port 34120 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:07:26.922951 sshd[1837]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:26.927881 systemd-logind[1626]: New session 2 of user core. Oct 2 19:07:26.928471 systemd[1]: Started session-2.scope. Oct 2 19:07:27.065071 sshd[1837]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:27.076604 systemd[1]: sshd@1-172.31.27.122:22-139.178.89.65:34120.service: Deactivated successfully. Oct 2 19:07:27.079531 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:07:27.086628 systemd-logind[1626]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:07:27.092143 systemd[1]: Started sshd@2-172.31.27.122:22-139.178.89.65:34128.service. Oct 2 19:07:27.093543 systemd-logind[1626]: Removed session 2. Oct 2 19:07:27.275348 sshd[1843]: Accepted publickey for core from 139.178.89.65 port 34128 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:07:27.277002 sshd[1843]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:27.287040 systemd-logind[1626]: New session 3 of user core. Oct 2 19:07:27.287711 systemd[1]: Started session-3.scope. Oct 2 19:07:27.407822 sshd[1843]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:27.412896 systemd[1]: sshd@2-172.31.27.122:22-139.178.89.65:34128.service: Deactivated successfully. Oct 2 19:07:27.414419 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:07:27.415091 systemd-logind[1626]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:07:27.416282 systemd-logind[1626]: Removed session 3. Oct 2 19:07:27.435717 systemd[1]: Started sshd@3-172.31.27.122:22-139.178.89.65:34140.service. Oct 2 19:07:27.607944 sshd[1849]: Accepted publickey for core from 139.178.89.65 port 34140 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:07:27.609480 sshd[1849]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:27.614919 systemd-logind[1626]: New session 4 of user core. Oct 2 19:07:27.615526 systemd[1]: Started session-4.scope. Oct 2 19:07:27.761270 sshd[1849]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:27.768791 systemd[1]: sshd@3-172.31.27.122:22-139.178.89.65:34140.service: Deactivated successfully. Oct 2 19:07:27.772122 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:07:27.776374 systemd-logind[1626]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:07:27.779750 systemd-logind[1626]: Removed session 4. Oct 2 19:07:27.794349 systemd[1]: Started sshd@4-172.31.27.122:22-139.178.89.65:34144.service. Oct 2 19:07:27.966739 sshd[1855]: Accepted publickey for core from 139.178.89.65 port 34144 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:07:27.968119 sshd[1855]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:27.974279 systemd[1]: Started session-5.scope. Oct 2 19:07:27.975205 systemd-logind[1626]: New session 5 of user core. Oct 2 19:07:28.105679 sudo[1858]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:07:28.105984 sudo[1858]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:07:28.123022 dbus-daemon[1617]: \xd0\u000d\x952'V: received setenforce notice (enforcing=589684480) Oct 2 19:07:28.125104 sudo[1858]: pam_unix(sudo:session): session closed for user root Oct 2 19:07:28.149124 sshd[1855]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:28.153088 systemd[1]: sshd@4-172.31.27.122:22-139.178.89.65:34144.service: Deactivated successfully. Oct 2 19:07:28.154083 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:07:28.154756 systemd-logind[1626]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:07:28.157590 systemd-logind[1626]: Removed session 5. Oct 2 19:07:28.172556 systemd[1]: Started sshd@5-172.31.27.122:22-139.178.89.65:34148.service. Oct 2 19:07:28.332607 sshd[1862]: Accepted publickey for core from 139.178.89.65 port 34148 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:07:28.334319 sshd[1862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:28.340415 systemd[1]: Started session-6.scope. Oct 2 19:07:28.341152 systemd-logind[1626]: New session 6 of user core. Oct 2 19:07:28.443012 sudo[1866]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:07:28.443314 sudo[1866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:07:28.446604 sudo[1866]: pam_unix(sudo:session): session closed for user root Oct 2 19:07:28.452114 sudo[1865]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:07:28.452395 sudo[1865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:07:28.462610 systemd[1]: Stopping audit-rules.service... Oct 2 19:07:28.463000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:07:28.465790 kernel: kauditd_printk_skb: 177 callbacks suppressed Oct 2 19:07:28.465850 kernel: audit: type=1305 audit(1696273648.463:160): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:07:28.476397 kernel: audit: type=1300 audit(1696273648.463:160): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffce8169520 a2=420 a3=0 items=0 ppid=1 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:28.463000 audit[1869]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffce8169520 a2=420 a3=0 items=0 ppid=1 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:28.476598 auditctl[1869]: No rules Oct 2 19:07:28.463000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:07:28.476897 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:07:28.477171 systemd[1]: Stopped audit-rules.service. Oct 2 19:07:28.480515 kernel: audit: type=1327 audit(1696273648.463:160): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:07:28.479966 systemd[1]: Starting audit-rules.service... Oct 2 19:07:28.487117 kernel: audit: type=1131 audit(1696273648.476:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.507728 augenrules[1886]: No rules Oct 2 19:07:28.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.508417 systemd[1]: Finished audit-rules.service. Oct 2 19:07:28.509723 sudo[1865]: pam_unix(sudo:session): session closed for user root Oct 2 19:07:28.508000 audit[1865]: USER_END pid=1865 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.520135 kernel: audit: type=1130 audit(1696273648.507:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.520234 kernel: audit: type=1106 audit(1696273648.508:163): pid=1865 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.520263 kernel: audit: type=1104 audit(1696273648.509:164): pid=1865 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.509000 audit[1865]: CRED_DISP pid=1865 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.531862 sshd[1862]: pam_unix(sshd:session): session closed for user core Oct 2 19:07:28.533000 audit[1862]: USER_END pid=1862 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.535960 systemd[1]: sshd@5-172.31.27.122:22-139.178.89.65:34148.service: Deactivated successfully. Oct 2 19:07:28.536947 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:07:28.538916 systemd-logind[1626]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:07:28.540255 systemd-logind[1626]: Removed session 6. Oct 2 19:07:28.533000 audit[1862]: CRED_DISP pid=1862 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.546563 kernel: audit: type=1106 audit(1696273648.533:165): pid=1862 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.546651 kernel: audit: type=1104 audit(1696273648.533:166): pid=1862 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.546681 kernel: audit: type=1131 audit(1696273648.533:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.122:22-139.178.89.65:34148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.122:22-139.178.89.65:34148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.558591 systemd[1]: Started sshd@6-172.31.27.122:22-139.178.89.65:34160.service. Oct 2 19:07:28.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.122:22-139.178.89.65:34160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.725000 audit[1892]: USER_ACCT pid=1892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.726000 audit[1892]: CRED_ACQ pid=1892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.726000 audit[1892]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffecd0279e0 a2=3 a3=0 items=0 ppid=1 pid=1892 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:28.726000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:07:28.728349 sshd[1892]: Accepted publickey for core from 139.178.89.65 port 34160 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:07:28.728282 sshd[1892]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:07:28.733710 systemd[1]: Started session-7.scope. Oct 2 19:07:28.734339 systemd-logind[1626]: New session 7 of user core. Oct 2 19:07:28.740000 audit[1892]: USER_START pid=1892 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.742000 audit[1894]: CRED_ACQ pid=1894 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:07:28.847000 audit[1895]: USER_ACCT pid=1895 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.848000 audit[1895]: CRED_REFR pid=1895 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:28.848714 sudo[1895]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:07:28.848945 sudo[1895]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:07:28.851000 audit[1895]: USER_START pid=1895 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:07:29.513191 systemd[1]: Starting docker.service... Oct 2 19:07:29.605209 env[1910]: time="2023-10-02T19:07:29.605150874Z" level=info msg="Starting up" Oct 2 19:07:29.608218 env[1910]: time="2023-10-02T19:07:29.608148337Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:07:29.608218 env[1910]: time="2023-10-02T19:07:29.608207645Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:07:29.608385 env[1910]: time="2023-10-02T19:07:29.608238777Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock <nil> 0 <nil>}] <nil> <nil>}" module=grpc Oct 2 19:07:29.608385 env[1910]: time="2023-10-02T19:07:29.608252940Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:07:29.611145 env[1910]: time="2023-10-02T19:07:29.611056972Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:07:29.611251 env[1910]: time="2023-10-02T19:07:29.611236232Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:07:29.611332 env[1910]: time="2023-10-02T19:07:29.611319608Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock <nil> 0 <nil>}] <nil> <nil>}" module=grpc Oct 2 19:07:29.611394 env[1910]: time="2023-10-02T19:07:29.611385379Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:07:29.621120 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2381837921-merged.mount: Deactivated successfully. Oct 2 19:07:29.904248 env[1910]: time="2023-10-02T19:07:29.904200069Z" level=info msg="Loading containers: start." Oct 2 19:07:30.029000 audit[1941]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1941 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.029000 audit[1941]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd65f2e010 a2=0 a3=7ffd65f2dffc items=0 ppid=1910 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.029000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:07:30.031000 audit[1943]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.031000 audit[1943]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe4eedd680 a2=0 a3=7ffe4eedd66c items=0 ppid=1910 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.031000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:07:30.039000 audit[1945]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.039000 audit[1945]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe0a3bc250 a2=0 a3=7ffe0a3bc23c items=0 ppid=1910 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.039000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:07:30.042000 audit[1948]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.042000 audit[1948]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc73c863d0 a2=0 a3=7ffc73c863bc items=0 ppid=1910 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.042000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:07:30.045000 audit[1950]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1950 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.045000 audit[1950]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcceba39a0 a2=0 a3=7ffcceba398c items=0 ppid=1910 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.045000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:07:30.063000 audit[1955]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.063000 audit[1955]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcb802ecd0 a2=0 a3=7ffcb802ecbc items=0 ppid=1910 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.063000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:07:30.074000 audit[1957]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.074000 audit[1957]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdb40d4080 a2=0 a3=7ffdb40d406c items=0 ppid=1910 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.074000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:07:30.076000 audit[1959]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.076000 audit[1959]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff5d03b9a0 a2=0 a3=7fff5d03b98c items=0 ppid=1910 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.076000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:07:30.079000 audit[1961]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.079000 audit[1961]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffcb8b64c10 a2=0 a3=7ffcb8b64bfc items=0 ppid=1910 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.079000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:07:30.092000 audit[1965]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.092000 audit[1965]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff52c3e180 a2=0 a3=7fff52c3e16c items=0 ppid=1910 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.092000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:07:30.093000 audit[1966]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1966 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.093000 audit[1966]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffccdf17df0 a2=0 a3=7ffccdf17ddc items=0 ppid=1910 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.093000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:07:30.104884 kernel: Initializing XFRM netlink socket Oct 2 19:07:30.185232 env[1910]: time="2023-10-02T19:07:30.182210438Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:07:30.186580 (udev-worker)[1921]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:07:30.252000 audit[1974]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.252000 audit[1974]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffda5da4a20 a2=0 a3=7ffda5da4a0c items=0 ppid=1910 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.252000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:07:30.335000 audit[1977]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1977 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.335000 audit[1977]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffea56bf3f0 a2=0 a3=7ffea56bf3dc items=0 ppid=1910 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.335000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:07:30.339000 audit[1980]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.339000 audit[1980]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffefc5b6cb0 a2=0 a3=7ffefc5b6c9c items=0 ppid=1910 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.339000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:07:30.341000 audit[1982]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.341000 audit[1982]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc6c64fc20 a2=0 a3=7ffc6c64fc0c items=0 ppid=1910 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:07:30.343000 audit[1984]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.343000 audit[1984]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffdf92edf30 a2=0 a3=7ffdf92edf1c items=0 ppid=1910 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.343000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:07:30.346000 audit[1986]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.346000 audit[1986]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffdca1e6cd0 a2=0 a3=7ffdca1e6cbc items=0 ppid=1910 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.346000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:07:30.348000 audit[1988]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.348000 audit[1988]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff2b8399c0 a2=0 a3=7fff2b8399ac items=0 ppid=1910 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.348000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:07:30.358000 audit[1991]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.358000 audit[1991]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff5c96a040 a2=0 a3=7fff5c96a02c items=0 ppid=1910 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.358000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:07:30.361000 audit[1993]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.361000 audit[1993]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe85e91ea0 a2=0 a3=7ffe85e91e8c items=0 ppid=1910 pid=1993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.361000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:07:30.364000 audit[1995]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.364000 audit[1995]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffe0de0300 a2=0 a3=7fffe0de02ec items=0 ppid=1910 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.364000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:07:30.370000 audit[1997]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.370000 audit[1997]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffede9f5020 a2=0 a3=7ffede9f500c items=0 ppid=1910 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.370000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:07:30.371952 systemd-networkd[1449]: docker0: Link UP Oct 2 19:07:30.383000 audit[2001]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.383000 audit[2001]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffe2a51530 a2=0 a3=7fffe2a5151c items=0 ppid=1910 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.383000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:07:30.385000 audit[2002]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2002 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:30.385000 audit[2002]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff0ce99340 a2=0 a3=7fff0ce9932c items=0 ppid=1910 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:30.385000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:07:30.386280 env[1910]: time="2023-10-02T19:07:30.386229907Z" level=info msg="Loading containers: done." Oct 2 19:07:30.400158 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2093292708-merged.mount: Deactivated successfully. Oct 2 19:07:30.427386 env[1910]: time="2023-10-02T19:07:30.427339289Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:07:30.427941 env[1910]: time="2023-10-02T19:07:30.427923310Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:07:30.428133 env[1910]: time="2023-10-02T19:07:30.428108300Z" level=info msg="Daemon has completed initialization" Oct 2 19:07:30.455283 systemd[1]: Started docker.service. Oct 2 19:07:30.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:30.474914 env[1910]: time="2023-10-02T19:07:30.474845130Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:07:30.504941 systemd[1]: Reloading. Oct 2 19:07:30.596436 /usr/lib/systemd/system-generators/torcx-generator[2047]: time="2023-10-02T19:07:30Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:07:30.596479 /usr/lib/systemd/system-generators/torcx-generator[2047]: time="2023-10-02T19:07:30Z" level=info msg="torcx already run" Oct 2 19:07:30.771578 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:07:30.771603 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:07:30.806111 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.899000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit: BPF prog-id=34 op=LOAD Oct 2 19:07:30.900000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit: BPF prog-id=35 op=LOAD Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.900000 audit: BPF prog-id=36 op=LOAD Oct 2 19:07:30.900000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:07:30.900000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.901000 audit: BPF prog-id=37 op=LOAD Oct 2 19:07:30.901000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit: BPF prog-id=38 op=LOAD Oct 2 19:07:30.905000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit: BPF prog-id=39 op=LOAD Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.905000 audit: BPF prog-id=40 op=LOAD Oct 2 19:07:30.906000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:07:30.906000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit: BPF prog-id=41 op=LOAD Oct 2 19:07:30.907000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit: BPF prog-id=42 op=LOAD Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.907000 audit: BPF prog-id=43 op=LOAD Oct 2 19:07:30.907000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:07:30.907000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.908000 audit: BPF prog-id=44 op=LOAD Oct 2 19:07:30.908000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.910000 audit: BPF prog-id=45 op=LOAD Oct 2 19:07:30.910000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit: BPF prog-id=46 op=LOAD Oct 2 19:07:30.912000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit: BPF prog-id=47 op=LOAD Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.912000 audit: BPF prog-id=48 op=LOAD Oct 2 19:07:30.913000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:07:30.913000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit: BPF prog-id=49 op=LOAD Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.913000 audit: BPF prog-id=50 op=LOAD Oct 2 19:07:30.913000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:07:30.913000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:30.916000 audit: BPF prog-id=51 op=LOAD Oct 2 19:07:30.916000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:07:30.930347 systemd[1]: Started kubelet.service. Oct 2 19:07:30.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:31.040499 kubelet[2099]: E1002 19:07:31.040336 2099 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:07:31.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:07:31.047889 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:07:31.048068 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:07:31.688976 env[1638]: time="2023-10-02T19:07:31.688928528Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:07:32.318144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3896219766.mount: Deactivated successfully. Oct 2 19:07:36.722358 env[1638]: time="2023-10-02T19:07:36.722300134Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:36.725267 env[1638]: time="2023-10-02T19:07:36.725225927Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:36.728073 env[1638]: time="2023-10-02T19:07:36.727912417Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:36.730207 env[1638]: time="2023-10-02T19:07:36.730172067Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:36.731468 env[1638]: time="2023-10-02T19:07:36.731368106Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:07:36.747512 env[1638]: time="2023-10-02T19:07:36.747434287Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:07:41.059893 env[1638]: time="2023-10-02T19:07:41.059841103Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:41.062235 env[1638]: time="2023-10-02T19:07:41.062189380Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:41.064455 env[1638]: time="2023-10-02T19:07:41.064414635Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:41.066438 env[1638]: time="2023-10-02T19:07:41.066401495Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:41.067086 env[1638]: time="2023-10-02T19:07:41.067051670Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:07:41.078367 env[1638]: time="2023-10-02T19:07:41.078330197Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:07:41.141950 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:07:41.151333 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:07:41.151678 kernel: audit: type=1130 audit(1696273661.141:410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:41.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:41.142219 systemd[1]: Stopped kubelet.service. Oct 2 19:07:41.144225 systemd[1]: Started kubelet.service. Oct 2 19:07:41.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:41.164528 kernel: audit: type=1131 audit(1696273661.141:411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:41.164707 kernel: audit: type=1130 audit(1696273661.143:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:41.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:41.223293 kubelet[2130]: E1002 19:07:41.223249 2130 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:07:41.227183 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:07:41.227356 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:07:41.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:07:41.233790 kernel: audit: type=1131 audit(1696273661.226:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:07:44.384838 env[1638]: time="2023-10-02T19:07:44.384753006Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:44.391934 env[1638]: time="2023-10-02T19:07:44.391882130Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:44.394052 env[1638]: time="2023-10-02T19:07:44.393997307Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:44.396401 env[1638]: time="2023-10-02T19:07:44.396354532Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:44.397220 env[1638]: time="2023-10-02T19:07:44.397182426Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:07:44.418345 env[1638]: time="2023-10-02T19:07:44.418299254Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:07:45.507276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1839836623.mount: Deactivated successfully. Oct 2 19:07:46.456977 env[1638]: time="2023-10-02T19:07:46.456930318Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.461310 env[1638]: time="2023-10-02T19:07:46.461267907Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.462673 env[1638]: time="2023-10-02T19:07:46.462347064Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:07:46.465511 env[1638]: time="2023-10-02T19:07:46.463365068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.465511 env[1638]: time="2023-10-02T19:07:46.464418965Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.474641 env[1638]: time="2023-10-02T19:07:46.474589899Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:07:46.963391 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1204606804.mount: Deactivated successfully. Oct 2 19:07:46.970708 env[1638]: time="2023-10-02T19:07:46.970663687Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.973347 env[1638]: time="2023-10-02T19:07:46.973302036Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.975422 env[1638]: time="2023-10-02T19:07:46.975388402Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.977323 env[1638]: time="2023-10-02T19:07:46.977290937Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:46.977802 env[1638]: time="2023-10-02T19:07:46.977750987Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:07:46.990193 env[1638]: time="2023-10-02T19:07:46.990155145Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:07:47.922979 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2648493609.mount: Deactivated successfully. Oct 2 19:07:51.392188 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:07:51.392462 systemd[1]: Stopped kubelet.service. Oct 2 19:07:51.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:51.401020 kernel: audit: type=1130 audit(1696273671.391:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:51.403206 systemd[1]: Started kubelet.service. Oct 2 19:07:51.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:51.412796 kernel: audit: type=1131 audit(1696273671.391:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:51.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:51.419790 kernel: audit: type=1130 audit(1696273671.402:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:51.508066 kubelet[2152]: E1002 19:07:51.508018 2152 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:07:51.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:07:51.510498 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:07:51.510668 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:07:51.518128 kernel: audit: type=1131 audit(1696273671.510:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:07:53.565227 env[1638]: time="2023-10-02T19:07:53.565170879Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:53.574589 env[1638]: time="2023-10-02T19:07:53.574542161Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:53.576849 env[1638]: time="2023-10-02T19:07:53.576814466Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:53.578939 env[1638]: time="2023-10-02T19:07:53.578900445Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:53.579557 env[1638]: time="2023-10-02T19:07:53.579523765Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:07:53.595203 env[1638]: time="2023-10-02T19:07:53.595166470Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:07:54.119527 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3098921924.mount: Deactivated successfully. Oct 2 19:07:54.371064 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:07:54.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:54.378959 kernel: audit: type=1131 audit(1696273674.370:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:54.392000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:07:54.392000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:07:54.396438 kernel: audit: type=1334 audit(1696273674.392:419): prog-id=43 op=UNLOAD Oct 2 19:07:54.396504 kernel: audit: type=1334 audit(1696273674.392:420): prog-id=42 op=UNLOAD Oct 2 19:07:54.396536 kernel: audit: type=1334 audit(1696273674.392:421): prog-id=41 op=UNLOAD Oct 2 19:07:54.392000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:07:55.010056 env[1638]: time="2023-10-02T19:07:55.010001830Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.014212 env[1638]: time="2023-10-02T19:07:55.014160030Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.018551 env[1638]: time="2023-10-02T19:07:55.018508937Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.020581 env[1638]: time="2023-10-02T19:07:55.020540279Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:07:55.021160 env[1638]: time="2023-10-02T19:07:55.021123699Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:07:58.016227 systemd[1]: Stopped kubelet.service. Oct 2 19:07:58.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:58.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:58.028726 kernel: audit: type=1130 audit(1696273678.015:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:58.028871 kernel: audit: type=1131 audit(1696273678.015:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:58.043817 systemd[1]: Reloading. Oct 2 19:07:58.184029 /usr/lib/systemd/system-generators/torcx-generator[2246]: time="2023-10-02T19:07:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:07:58.184706 /usr/lib/systemd/system-generators/torcx-generator[2246]: time="2023-10-02T19:07:58Z" level=info msg="torcx already run" Oct 2 19:07:58.332656 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:07:58.332680 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:07:58.356415 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:07:58.446846 kernel: audit: type=1400 audit(1696273678.435:424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.447071 kernel: audit: type=1400 audit(1696273678.435:425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451932 kernel: audit: type=1400 audit(1696273678.435:426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.457276 kernel: audit: type=1400 audit(1696273678.435:427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.463386 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:07:58.463508 kernel: audit: type=1400 audit(1696273678.435:428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.463542 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469467 kernel: audit: type=1400 audit(1696273678.435:429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit: BPF prog-id=52 op=LOAD Oct 2 19:07:58.445000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit: BPF prog-id=53 op=LOAD Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit: BPF prog-id=54 op=LOAD Oct 2 19:07:58.445000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:07:58.445000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.445000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit: BPF prog-id=55 op=LOAD Oct 2 19:07:58.451000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.451000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit: BPF prog-id=56 op=LOAD Oct 2 19:07:58.456000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit: BPF prog-id=57 op=LOAD Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.469000 audit: BPF prog-id=59 op=LOAD Oct 2 19:07:58.469000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.473000 audit: BPF prog-id=60 op=LOAD Oct 2 19:07:58.473000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.475000 audit: BPF prog-id=61 op=LOAD Oct 2 19:07:58.475000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit: BPF prog-id=62 op=LOAD Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.476000 audit: BPF prog-id=63 op=LOAD Oct 2 19:07:58.476000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:07:58.476000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit: BPF prog-id=64 op=LOAD Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.477000 audit: BPF prog-id=65 op=LOAD Oct 2 19:07:58.477000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:07:58.477000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:07:58.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:58.480000 audit: BPF prog-id=66 op=LOAD Oct 2 19:07:58.480000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:07:58.502402 systemd[1]: Started kubelet.service. Oct 2 19:07:58.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:07:58.574078 kubelet[2300]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:07:58.574078 kubelet[2300]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:07:58.574078 kubelet[2300]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:07:58.574546 kubelet[2300]: I1002 19:07:58.574135 2300 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:07:58.986088 kubelet[2300]: I1002 19:07:58.986052 2300 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:07:58.986088 kubelet[2300]: I1002 19:07:58.986082 2300 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:07:58.986378 kubelet[2300]: I1002 19:07:58.986328 2300 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:07:58.993109 kubelet[2300]: E1002 19:07:58.993083 2300 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.27.122:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:58.993508 kubelet[2300]: I1002 19:07:58.993488 2300 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:07:58.994498 kubelet[2300]: I1002 19:07:58.994477 2300 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:07:58.994903 kubelet[2300]: I1002 19:07:58.994807 2300 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:07:58.995005 kubelet[2300]: I1002 19:07:58.994984 2300 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.1} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity:<nil> Percentage:0.05} GracePeriod:0s MinReclaim:<nil>} {Signal:imagefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.15} GracePeriod:0s MinReclaim:<nil>}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:07:58.995166 kubelet[2300]: I1002 19:07:58.995016 2300 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:07:58.995166 kubelet[2300]: I1002 19:07:58.995035 2300 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:07:58.995166 kubelet[2300]: I1002 19:07:58.995158 2300 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:07:59.006220 kubelet[2300]: I1002 19:07:59.006198 2300 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:07:59.006397 kubelet[2300]: I1002 19:07:59.006385 2300 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:07:59.006483 kubelet[2300]: I1002 19:07:59.006474 2300 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:07:59.006553 kubelet[2300]: I1002 19:07:59.006546 2300 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:07:59.006775 kubelet[2300]: W1002 19:07:59.006712 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.27.122:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-122&limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.006859 kubelet[2300]: E1002 19:07:59.006795 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.27.122:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-122&limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.007429 kubelet[2300]: W1002 19:07:59.007386 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.27.122:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.007646 kubelet[2300]: E1002 19:07:59.007630 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.27.122:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.007923 kubelet[2300]: I1002 19:07:59.007907 2300 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:07:59.008432 kubelet[2300]: W1002 19:07:59.008417 2300 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:07:59.009034 kubelet[2300]: I1002 19:07:59.009018 2300 server.go:1168] "Started kubelet" Oct 2 19:07:59.014570 kubelet[2300]: E1002 19:07:59.014547 2300 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:07:59.014677 kubelet[2300]: E1002 19:07:59.014579 2300 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:07:59.013000 audit[2300]: AVC avc: denied { mac_admin } for pid=2300 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.013000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:59.015151 kubelet[2300]: E1002 19:07:59.014948 2300 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-27-122.178a5fec7f2d0c51", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-27-122", UID:"ip-172-31-27-122", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-27-122"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 7, 59, 8992337, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 7, 59, 8992337, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.27.122:6443/api/v1/namespaces/default/events": dial tcp 172.31.27.122:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:07:59.013000 audit[2300]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bd72f0 a1=c000c7aca8 a2=c000bd72c0 a3=25 items=0 ppid=1 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.013000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:59.015654 kubelet[2300]: I1002 19:07:59.015525 2300 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:07:59.013000 audit[2300]: AVC avc: denied { mac_admin } for pid=2300 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.013000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:59.013000 audit[2300]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c0e960 a1=c000c7acc0 a2=c000bd7380 a3=25 items=0 ppid=1 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.013000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:59.016114 kubelet[2300]: I1002 19:07:59.016101 2300 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:07:59.016329 kubelet[2300]: I1002 19:07:59.016318 2300 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:07:59.019928 kubelet[2300]: I1002 19:07:59.019904 2300 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:07:59.020701 kubelet[2300]: I1002 19:07:59.020674 2300 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:07:59.022027 kubelet[2300]: I1002 19:07:59.022006 2300 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:07:59.022000 audit[2311]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.022000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe366f6d60 a2=0 a3=7ffe366f6d4c items=0 ppid=2300 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.022000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:07:59.024000 audit[2312]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.024000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff08b15e80 a2=0 a3=7fff08b15e6c items=0 ppid=2300 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.024000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:07:59.026540 kubelet[2300]: I1002 19:07:59.026513 2300 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:07:59.026705 kubelet[2300]: I1002 19:07:59.026620 2300 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:07:59.027170 kubelet[2300]: W1002 19:07:59.027125 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.27.122:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.027241 kubelet[2300]: E1002 19:07:59.027174 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.27.122:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.027428 kubelet[2300]: E1002 19:07:59.027404 2300 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.122:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-122?timeout=10s\": dial tcp 172.31.27.122:6443: connect: connection refused" interval="200ms" Oct 2 19:07:59.030000 audit[2314]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.030000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc863511a0 a2=0 a3=7ffc8635118c items=0 ppid=2300 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.030000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:07:59.034000 audit[2316]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.034000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc07f24bc0 a2=0 a3=7ffc07f24bac items=0 ppid=2300 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.034000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:07:59.061000 audit[2321]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.061000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd24787cc0 a2=0 a3=7ffd24787cac items=0 ppid=2300 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.061000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:07:59.065953 kubelet[2300]: I1002 19:07:59.065930 2300 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:07:59.065000 audit[2324]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:59.065000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdd1d36e20 a2=0 a3=7ffdd1d36e0c items=0 ppid=2300 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.065000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:07:59.069024 kubelet[2300]: I1002 19:07:59.069000 2300 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:07:59.069118 kubelet[2300]: I1002 19:07:59.069049 2300 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:07:59.069118 kubelet[2300]: I1002 19:07:59.069068 2300 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:07:59.069207 kubelet[2300]: E1002 19:07:59.069150 2300 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:07:59.068000 audit[2325]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.068000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff1cef1e80 a2=0 a3=7fff1cef1e6c items=0 ppid=2300 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.068000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:07:59.070799 kubelet[2300]: W1002 19:07:59.070719 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.27.122:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.070870 kubelet[2300]: E1002 19:07:59.070813 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.27.122:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:07:59.072219 kubelet[2300]: I1002 19:07:59.072202 2300 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:07:59.072391 kubelet[2300]: I1002 19:07:59.072378 2300 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:07:59.072501 kubelet[2300]: I1002 19:07:59.072491 2300 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:07:59.071000 audit[2326]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:59.071000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc0fa31e70 a2=0 a3=7ffc0fa31e5c items=0 ppid=2300 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.071000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:07:59.071000 audit[2327]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.071000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff05cd9150 a2=0 a3=7fff05cd913c items=0 ppid=2300 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:07:59.073000 audit[2329]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:07:59.073000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde8bea760 a2=0 a3=7ffde8bea74c items=0 ppid=2300 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:07:59.073000 audit[2328]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:59.073000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffda21691b0 a2=0 a3=10e3 items=0 ppid=2300 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.073000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:07:59.074000 audit[2330]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2330 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:07:59.074000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc93d18190 a2=0 a3=7ffc93d1817c items=0 ppid=2300 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.074000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:07:59.078165 kubelet[2300]: I1002 19:07:59.078151 2300 policy_none.go:49] "None policy: Start" Oct 2 19:07:59.079056 kubelet[2300]: I1002 19:07:59.079043 2300 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:07:59.079186 kubelet[2300]: I1002 19:07:59.079175 2300 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:07:59.086083 systemd[1]: Created slice kubepods.slice. Oct 2 19:07:59.090616 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:07:59.093759 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:07:59.099584 kubelet[2300]: I1002 19:07:59.099559 2300 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:07:59.097000 audit[2300]: AVC avc: denied { mac_admin } for pid=2300 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:07:59.097000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:07:59.097000 audit[2300]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fdb4a0 a1=c000ffe5e8 a2=c000fdb470 a3=25 items=0 ppid=1 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:07:59.097000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:07:59.100015 kubelet[2300]: I1002 19:07:59.099635 2300 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:07:59.100015 kubelet[2300]: I1002 19:07:59.099872 2300 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:07:59.101320 kubelet[2300]: E1002 19:07:59.101297 2300 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-27-122\" not found" Oct 2 19:07:59.134122 kubelet[2300]: I1002 19:07:59.134093 2300 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-122" Oct 2 19:07:59.134514 kubelet[2300]: E1002 19:07:59.134492 2300 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.122:6443/api/v1/nodes\": dial tcp 172.31.27.122:6443: connect: connection refused" node="ip-172-31-27-122" Oct 2 19:07:59.169435 kubelet[2300]: I1002 19:07:59.169393 2300 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:07:59.171092 kubelet[2300]: I1002 19:07:59.171066 2300 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:07:59.173035 kubelet[2300]: I1002 19:07:59.173018 2300 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:07:59.181214 systemd[1]: Created slice kubepods-burstable-pod17d2428617922ecb86f859a8c32d63af.slice. Oct 2 19:07:59.192628 systemd[1]: Created slice kubepods-burstable-podd5d267e9b076d7e600598902d0eeb199.slice. Oct 2 19:07:59.197818 systemd[1]: Created slice kubepods-burstable-pod785eb7609a86e002c0181f840ceff3db.slice. Oct 2 19:07:59.228180 kubelet[2300]: E1002 19:07:59.228142 2300 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.122:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-122?timeout=10s\": dial tcp 172.31.27.122:6443: connect: connection refused" interval="400ms" Oct 2 19:07:59.329186 kubelet[2300]: I1002 19:07:59.328747 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:07:59.329186 kubelet[2300]: I1002 19:07:59.328829 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:07:59.329186 kubelet[2300]: I1002 19:07:59.328868 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/785eb7609a86e002c0181f840ceff3db-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-122\" (UID: \"785eb7609a86e002c0181f840ceff3db\") " pod="kube-system/kube-scheduler-ip-172-31-27-122" Oct 2 19:07:59.329186 kubelet[2300]: I1002 19:07:59.328905 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/17d2428617922ecb86f859a8c32d63af-ca-certs\") pod \"kube-apiserver-ip-172-31-27-122\" (UID: \"17d2428617922ecb86f859a8c32d63af\") " pod="kube-system/kube-apiserver-ip-172-31-27-122" Oct 2 19:07:59.329186 kubelet[2300]: I1002 19:07:59.328933 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/17d2428617922ecb86f859a8c32d63af-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-122\" (UID: \"17d2428617922ecb86f859a8c32d63af\") " pod="kube-system/kube-apiserver-ip-172-31-27-122" Oct 2 19:07:59.329516 kubelet[2300]: I1002 19:07:59.328961 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:07:59.329516 kubelet[2300]: I1002 19:07:59.328994 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:07:59.329516 kubelet[2300]: I1002 19:07:59.329027 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/17d2428617922ecb86f859a8c32d63af-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-122\" (UID: \"17d2428617922ecb86f859a8c32d63af\") " pod="kube-system/kube-apiserver-ip-172-31-27-122" Oct 2 19:07:59.329516 kubelet[2300]: I1002 19:07:59.329056 2300 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:07:59.336179 kubelet[2300]: I1002 19:07:59.336145 2300 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-122" Oct 2 19:07:59.336593 kubelet[2300]: E1002 19:07:59.336567 2300 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.122:6443/api/v1/nodes\": dial tcp 172.31.27.122:6443: connect: connection refused" node="ip-172-31-27-122" Oct 2 19:07:59.491115 env[1638]: time="2023-10-02T19:07:59.491070033Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-122,Uid:17d2428617922ecb86f859a8c32d63af,Namespace:kube-system,Attempt:0,}" Oct 2 19:07:59.496928 env[1638]: time="2023-10-02T19:07:59.496887910Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-122,Uid:d5d267e9b076d7e600598902d0eeb199,Namespace:kube-system,Attempt:0,}" Oct 2 19:07:59.501611 env[1638]: time="2023-10-02T19:07:59.501571411Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-122,Uid:785eb7609a86e002c0181f840ceff3db,Namespace:kube-system,Attempt:0,}" Oct 2 19:07:59.629613 kubelet[2300]: E1002 19:07:59.629515 2300 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.122:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-122?timeout=10s\": dial tcp 172.31.27.122:6443: connect: connection refused" interval="800ms" Oct 2 19:07:59.738874 kubelet[2300]: I1002 19:07:59.738837 2300 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-122" Oct 2 19:07:59.739224 kubelet[2300]: E1002 19:07:59.739203 2300 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.122:6443/api/v1/nodes\": dial tcp 172.31.27.122:6443: connect: connection refused" node="ip-172-31-27-122" Oct 2 19:08:00.084320 kubelet[2300]: W1002 19:08:00.084174 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.27.122:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.084320 kubelet[2300]: E1002 19:08:00.084254 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.27.122:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.098225 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1237301922.mount: Deactivated successfully. Oct 2 19:08:00.151581 env[1638]: time="2023-10-02T19:08:00.151528039Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.153442 env[1638]: time="2023-10-02T19:08:00.153394116Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.156981 env[1638]: time="2023-10-02T19:08:00.156932789Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.158982 env[1638]: time="2023-10-02T19:08:00.158934143Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.160095 kubelet[2300]: W1002 19:08:00.159971 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.27.122:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.160095 kubelet[2300]: E1002 19:08:00.160046 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.27.122:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.163484 env[1638]: time="2023-10-02T19:08:00.163434322Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.166098 env[1638]: time="2023-10-02T19:08:00.166052977Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.167977 env[1638]: time="2023-10-02T19:08:00.167930936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.171088 env[1638]: time="2023-10-02T19:08:00.171043069Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.176350 env[1638]: time="2023-10-02T19:08:00.176300030Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.177583 env[1638]: time="2023-10-02T19:08:00.177543968Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.178729 env[1638]: time="2023-10-02T19:08:00.178694666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.180966 env[1638]: time="2023-10-02T19:08:00.180917604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:00.225137 env[1638]: time="2023-10-02T19:08:00.222568219Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:08:00.225137 env[1638]: time="2023-10-02T19:08:00.222615314Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:08:00.225137 env[1638]: time="2023-10-02T19:08:00.222633071Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:08:00.225137 env[1638]: time="2023-10-02T19:08:00.222801145Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9282603ccdb53dec32b3f7731a1d28c9b08be567a1262b57706c0599a66d77c7 pid=2338 runtime=io.containerd.runc.v2 Oct 2 19:08:00.227709 kubelet[2300]: W1002 19:08:00.227642 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.27.122:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-122&limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.227877 kubelet[2300]: E1002 19:08:00.227720 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.27.122:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-122&limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.241600 env[1638]: time="2023-10-02T19:08:00.241526656Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:08:00.241983 env[1638]: time="2023-10-02T19:08:00.241907961Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:08:00.242141 env[1638]: time="2023-10-02T19:08:00.242110491Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:08:00.242429 env[1638]: time="2023-10-02T19:08:00.242388081Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/02eb953758eb553d140c3032e70d31794d8aeb64ec3dac8e5dea1088a929d78a pid=2356 runtime=io.containerd.runc.v2 Oct 2 19:08:00.269128 systemd[1]: Started cri-containerd-9282603ccdb53dec32b3f7731a1d28c9b08be567a1262b57706c0599a66d77c7.scope. Oct 2 19:08:00.294403 env[1638]: time="2023-10-02T19:08:00.294196151Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:08:00.294403 env[1638]: time="2023-10-02T19:08:00.294245376Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:08:00.294403 env[1638]: time="2023-10-02T19:08:00.294258551Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:08:00.295533 env[1638]: time="2023-10-02T19:08:00.295441490Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b927a37a10bb0c163be0f519dd5d64c8459cab97c92d3ce8aff6510f48d2f2e4 pid=2385 runtime=io.containerd.runc.v2 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit: BPF prog-id=67 op=LOAD Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2338 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383236303363636462353364656333326233663737333161316432 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2338 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383236303363636462353364656333326233663737333161316432 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit: BPF prog-id=68 op=LOAD Oct 2 19:08:00.302000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000313540 items=0 ppid=2338 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383236303363636462353364656333326233663737333161316432 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.302000 audit: BPF prog-id=69 op=LOAD Oct 2 19:08:00.302000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000313588 items=0 ppid=2338 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383236303363636462353364656333326233663737333161316432 Oct 2 19:08:00.303000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:08:00.303000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { perfmon } for pid=2361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit[2361]: AVC avc: denied { bpf } for pid=2361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.303000 audit: BPF prog-id=70 op=LOAD Oct 2 19:08:00.303000 audit[2361]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000313998 items=0 ppid=2338 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932383236303363636462353364656333326233663737333161316432 Oct 2 19:08:00.323620 systemd[1]: Started cri-containerd-02eb953758eb553d140c3032e70d31794d8aeb64ec3dac8e5dea1088a929d78a.scope. Oct 2 19:08:00.352096 systemd[1]: Started cri-containerd-b927a37a10bb0c163be0f519dd5d64c8459cab97c92d3ce8aff6510f48d2f2e4.scope. Oct 2 19:08:00.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.364000 audit: BPF prog-id=71 op=LOAD Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2356 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032656239353337353865623535336431343063333033326537306433 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2356 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032656239353337353865623535336431343063333033326537306433 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit: BPF prog-id=72 op=LOAD Oct 2 19:08:00.365000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000349dc0 items=0 ppid=2356 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032656239353337353865623535336431343063333033326537306433 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit: BPF prog-id=73 op=LOAD Oct 2 19:08:00.365000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000349e08 items=0 ppid=2356 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032656239353337353865623535336431343063333033326537306433 Oct 2 19:08:00.365000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:08:00.365000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { perfmon } for pid=2369 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit[2369]: AVC avc: denied { bpf } for pid=2369 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.365000 audit: BPF prog-id=74 op=LOAD Oct 2 19:08:00.365000 audit[2369]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003cc218 items=0 ppid=2356 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032656239353337353865623535336431343063333033326537306433 Oct 2 19:08:00.421154 env[1638]: time="2023-10-02T19:08:00.421103551Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-122,Uid:d5d267e9b076d7e600598902d0eeb199,Namespace:kube-system,Attempt:0,} returns sandbox id \"9282603ccdb53dec32b3f7731a1d28c9b08be567a1262b57706c0599a66d77c7\"" Oct 2 19:08:00.432989 kubelet[2300]: E1002 19:08:00.431633 2300 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.122:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-122?timeout=10s\": dial tcp 172.31.27.122:6443: connect: connection refused" interval="1.6s" Oct 2 19:08:00.433159 env[1638]: time="2023-10-02T19:08:00.432322231Z" level=info msg="CreateContainer within sandbox \"9282603ccdb53dec32b3f7731a1d28c9b08be567a1262b57706c0599a66d77c7\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.437000 audit: BPF prog-id=75 op=LOAD Oct 2 19:08:00.439000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.439000 audit[2406]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2385 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323761333761313062623063313633626530663531396464356436 Oct 2 19:08:00.439000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.439000 audit[2406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2385 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323761333761313062623063313633626530663531396464356436 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.440000 audit: BPF prog-id=76 op=LOAD Oct 2 19:08:00.440000 audit[2406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003285a0 items=0 ppid=2385 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323761333761313062623063313633626530663531396464356436 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.441000 audit: BPF prog-id=77 op=LOAD Oct 2 19:08:00.441000 audit[2406]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003285e8 items=0 ppid=2385 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323761333761313062623063313633626530663531396464356436 Oct 2 19:08:00.442000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:08:00.442000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { perfmon } for pid=2406 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit[2406]: AVC avc: denied { bpf } for pid=2406 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.442000 audit: BPF prog-id=78 op=LOAD Oct 2 19:08:00.442000 audit[2406]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003289f8 items=0 ppid=2385 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239323761333761313062623063313633626530663531396464356436 Oct 2 19:08:00.460875 env[1638]: time="2023-10-02T19:08:00.460820820Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-122,Uid:17d2428617922ecb86f859a8c32d63af,Namespace:kube-system,Attempt:0,} returns sandbox id \"02eb953758eb553d140c3032e70d31794d8aeb64ec3dac8e5dea1088a929d78a\"" Oct 2 19:08:00.465110 env[1638]: time="2023-10-02T19:08:00.465063365Z" level=info msg="CreateContainer within sandbox \"02eb953758eb553d140c3032e70d31794d8aeb64ec3dac8e5dea1088a929d78a\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:08:00.478010 env[1638]: time="2023-10-02T19:08:00.477800148Z" level=info msg="CreateContainer within sandbox \"9282603ccdb53dec32b3f7731a1d28c9b08be567a1262b57706c0599a66d77c7\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08\"" Oct 2 19:08:00.480108 env[1638]: time="2023-10-02T19:08:00.480073011Z" level=info msg="StartContainer for \"29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08\"" Oct 2 19:08:00.485998 kubelet[2300]: W1002 19:08:00.485924 2300 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.27.122:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.486167 kubelet[2300]: E1002 19:08:00.486010 2300 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.27.122:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:00.490142 env[1638]: time="2023-10-02T19:08:00.490095031Z" level=info msg="CreateContainer within sandbox \"02eb953758eb553d140c3032e70d31794d8aeb64ec3dac8e5dea1088a929d78a\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"3b15177a3254dccb7ead8e76378298558a604c92efe80a39ce0b723fa5e614ca\"" Oct 2 19:08:00.491009 env[1638]: time="2023-10-02T19:08:00.490978606Z" level=info msg="StartContainer for \"3b15177a3254dccb7ead8e76378298558a604c92efe80a39ce0b723fa5e614ca\"" Oct 2 19:08:00.504585 env[1638]: time="2023-10-02T19:08:00.504537725Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-122,Uid:785eb7609a86e002c0181f840ceff3db,Namespace:kube-system,Attempt:0,} returns sandbox id \"b927a37a10bb0c163be0f519dd5d64c8459cab97c92d3ce8aff6510f48d2f2e4\"" Oct 2 19:08:00.508571 env[1638]: time="2023-10-02T19:08:00.508528895Z" level=info msg="CreateContainer within sandbox \"b927a37a10bb0c163be0f519dd5d64c8459cab97c92d3ce8aff6510f48d2f2e4\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:08:00.517246 systemd[1]: Started cri-containerd-29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08.scope. Oct 2 19:08:00.532050 env[1638]: time="2023-10-02T19:08:00.532003026Z" level=info msg="CreateContainer within sandbox \"b927a37a10bb0c163be0f519dd5d64c8459cab97c92d3ce8aff6510f48d2f2e4\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6\"" Oct 2 19:08:00.532934 env[1638]: time="2023-10-02T19:08:00.532901676Z" level=info msg="StartContainer for \"d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6\"" Oct 2 19:08:00.542043 kubelet[2300]: I1002 19:08:00.541651 2300 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-122" Oct 2 19:08:00.542043 kubelet[2300]: E1002 19:08:00.542015 2300 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.122:6443/api/v1/nodes\": dial tcp 172.31.27.122:6443: connect: connection refused" node="ip-172-31-27-122" Oct 2 19:08:00.552165 systemd[1]: Started cri-containerd-3b15177a3254dccb7ead8e76378298558a604c92efe80a39ce0b723fa5e614ca.scope. Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit: BPF prog-id=79 op=LOAD Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2338 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323937636339373838346337316433386236326630373139326664 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2338 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323937636339373838346337316433386236326630373139326664 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit: BPF prog-id=80 op=LOAD Oct 2 19:08:00.562000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c53f0 items=0 ppid=2338 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323937636339373838346337316433386236326630373139326664 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.562000 audit: BPF prog-id=81 op=LOAD Oct 2 19:08:00.562000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c5438 items=0 ppid=2338 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.562000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323937636339373838346337316433386236326630373139326664 Oct 2 19:08:00.563000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:08:00.563000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { perfmon } for pid=2461 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit[2461]: AVC avc: denied { bpf } for pid=2461 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.563000 audit: BPF prog-id=82 op=LOAD Oct 2 19:08:00.563000 audit[2461]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c5848 items=0 ppid=2338 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.563000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239323937636339373838346337316433386236326630373139326664 Oct 2 19:08:00.592582 systemd[1]: Started cri-containerd-d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6.scope. Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.619000 audit: BPF prog-id=83 op=LOAD Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2356 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313531373761333235346463636237656164386537363337383239 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2356 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313531373761333235346463636237656164386537363337383239 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit: BPF prog-id=84 op=LOAD Oct 2 19:08:00.621000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ed100 items=0 ppid=2356 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313531373761333235346463636237656164386537363337383239 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.621000 audit: BPF prog-id=85 op=LOAD Oct 2 19:08:00.621000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ed148 items=0 ppid=2356 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.621000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313531373761333235346463636237656164386537363337383239 Oct 2 19:08:00.621000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:08:00.622000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.622000 audit: BPF prog-id=86 op=LOAD Oct 2 19:08:00.622000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ed558 items=0 ppid=2356 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362313531373761333235346463636237656164386537363337383239 Oct 2 19:08:00.662580 env[1638]: time="2023-10-02T19:08:00.662530100Z" level=info msg="StartContainer for \"29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08\" returns successfully" Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.672000 audit: BPF prog-id=87 op=LOAD Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2385 pid=2510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383361666333633061383963313965303235633865653635343330 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2385 pid=2510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383361666333633061383963313965303235633865653635343330 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.673000 audit: BPF prog-id=88 op=LOAD Oct 2 19:08:00.673000 audit[2510]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002a6b10 items=0 ppid=2385 pid=2510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383361666333633061383963313965303235633865653635343330 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit: BPF prog-id=89 op=LOAD Oct 2 19:08:00.674000 audit[2510]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002a6b58 items=0 ppid=2385 pid=2510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383361666333633061383963313965303235633865653635343330 Oct 2 19:08:00.674000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:08:00.674000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { perfmon } for pid=2510 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit[2510]: AVC avc: denied { bpf } for pid=2510 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:00.674000 audit: BPF prog-id=90 op=LOAD Oct 2 19:08:00.674000 audit[2510]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002a6f68 items=0 ppid=2385 pid=2510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:00.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433383361666333633061383963313965303235633865653635343330 Oct 2 19:08:00.713009 env[1638]: time="2023-10-02T19:08:00.712951862Z" level=info msg="StartContainer for \"3b15177a3254dccb7ead8e76378298558a604c92efe80a39ce0b723fa5e614ca\" returns successfully" Oct 2 19:08:00.734200 env[1638]: time="2023-10-02T19:08:00.734141855Z" level=info msg="StartContainer for \"d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6\" returns successfully" Oct 2 19:08:01.081845 kubelet[2300]: E1002 19:08:01.081817 2300 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.27.122:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.27.122:6443: connect: connection refused Oct 2 19:08:01.524087 kubelet[2300]: E1002 19:08:01.523950 2300 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-27-122.178a5fec7f2d0c51", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:<nil>, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-27-122", UID:"ip-172-31-27-122", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-27-122"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 7, 59, 8992337, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 7, 59, 8992337, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.27.122:6443/api/v1/namespaces/default/events": dial tcp 172.31.27.122:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:08:02.143742 kubelet[2300]: I1002 19:08:02.143714 2300 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-122" Oct 2 19:08:02.447000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:02.447000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00033a720 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:02.447000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:02.450000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:02.450000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000563c0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:02.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:04.267808 kernel: kauditd_printk_skb: 577 callbacks suppressed Oct 2 19:08:04.267981 kernel: audit: type=1400 audit(1696273684.264:714): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.264000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.266000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.279678 kernel: audit: type=1400 audit(1696273684.266:715): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.266000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0039c8cc0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.287997 kernel: audit: type=1300 audit(1696273684.266:715): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0039c8cc0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.266000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.303999 kernel: audit: type=1327 audit(1696273684.266:715): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.304132 kernel: audit: type=1300 audit(1696273684.264:714): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0039fa000 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.264000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0039fa000 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.311561 kernel: audit: type=1327 audit(1696273684.264:714): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.264000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.267000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.326506 kernel: audit: type=1400 audit(1696273684.267:716): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.326677 kernel: audit: type=1300 audit(1696273684.267:716): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004f209e0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.267000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004f209e0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.340825 kernel: audit: type=1327 audit(1696273684.267:716): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.282000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.365851 kernel: audit: type=1400 audit(1696273684.282:717): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.282000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0039c8e40 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.303000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.303000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c004250820 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.303000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.303000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:04.303000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c0027fa5a0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:08:04.303000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:08:04.568718 kubelet[2300]: E1002 19:08:04.568604 2300 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-27-122\" not found" node="ip-172-31-27-122" Oct 2 19:08:04.628985 kubelet[2300]: I1002 19:08:04.628954 2300 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-27-122" Oct 2 19:08:05.016279 kubelet[2300]: I1002 19:08:05.016233 2300 apiserver.go:52] "Watching apiserver" Oct 2 19:08:05.027394 kubelet[2300]: I1002 19:08:05.027351 2300 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:08:05.074205 kubelet[2300]: I1002 19:08:05.074179 2300 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:08:07.171029 systemd[1]: Reloading. Oct 2 19:08:07.299343 /usr/lib/systemd/system-generators/torcx-generator[2596]: time="2023-10-02T19:08:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:08:07.301893 /usr/lib/systemd/system-generators/torcx-generator[2596]: time="2023-10-02T19:08:07Z" level=info msg="torcx already run" Oct 2 19:08:07.446950 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:08:07.446973 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:08:07.470095 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit: BPF prog-id=91 op=LOAD Oct 2 19:08:07.560000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit: BPF prog-id=92 op=LOAD Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.562000 audit: BPF prog-id=93 op=LOAD Oct 2 19:08:07.562000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:08:07.562000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:08:07.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.563000 audit: BPF prog-id=94 op=LOAD Oct 2 19:08:07.564000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.565000 audit: BPF prog-id=95 op=LOAD Oct 2 19:08:07.565000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.566000 audit: BPF prog-id=96 op=LOAD Oct 2 19:08:07.566000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit: BPF prog-id=97 op=LOAD Oct 2 19:08:07.568000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit: BPF prog-id=98 op=LOAD Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit: BPF prog-id=99 op=LOAD Oct 2 19:08:07.569000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:08:07.569000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.569000 audit: BPF prog-id=100 op=LOAD Oct 2 19:08:07.569000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.571000 audit: BPF prog-id=101 op=LOAD Oct 2 19:08:07.571000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.573000 audit: BPF prog-id=102 op=LOAD Oct 2 19:08:07.573000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit: BPF prog-id=103 op=LOAD Oct 2 19:08:07.575000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit: BPF prog-id=104 op=LOAD Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.575000 audit: BPF prog-id=105 op=LOAD Oct 2 19:08:07.575000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:08:07.575000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit: BPF prog-id=106 op=LOAD Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.576000 audit: BPF prog-id=107 op=LOAD Oct 2 19:08:07.576000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:08:07.576000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.577000 audit: BPF prog-id=108 op=LOAD Oct 2 19:08:07.577000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.580000 audit: BPF prog-id=109 op=LOAD Oct 2 19:08:07.580000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.581000 audit: BPF prog-id=110 op=LOAD Oct 2 19:08:07.581000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.582000 audit: BPF prog-id=111 op=LOAD Oct 2 19:08:07.582000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:08:07.600390 kubelet[2300]: I1002 19:08:07.600354 2300 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:08:07.602663 systemd[1]: Stopping kubelet.service... Oct 2 19:08:07.621244 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:08:07.621537 systemd[1]: Stopped kubelet.service. Oct 2 19:08:07.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:07.623000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:07.623730 systemd[1]: Started kubelet.service. Oct 2 19:08:07.747943 kubelet[2646]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:08:07.747943 kubelet[2646]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:08:07.747943 kubelet[2646]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:08:07.747943 kubelet[2646]: I1002 19:08:07.747872 2646 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:08:07.759479 kubelet[2646]: I1002 19:08:07.759442 2646 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:08:07.759479 kubelet[2646]: I1002 19:08:07.759470 2646 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:08:07.760677 kubelet[2646]: I1002 19:08:07.759749 2646 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:08:07.763915 kubelet[2646]: I1002 19:08:07.763299 2646 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:08:07.765882 kubelet[2646]: I1002 19:08:07.765851 2646 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:08:07.769048 kubelet[2646]: I1002 19:08:07.767896 2646 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:08:07.769048 kubelet[2646]: I1002 19:08:07.768278 2646 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:08:07.769048 kubelet[2646]: I1002 19:08:07.768368 2646 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.15} GracePeriod:0s MinReclaim:<nil>} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.available Operator:LessThan Value:{Quantity:<nil> Percentage:0.1} GracePeriod:0s MinReclaim:<nil>} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity:<nil> Percentage:0.05} GracePeriod:0s MinReclaim:<nil>}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:08:07.769048 kubelet[2646]: I1002 19:08:07.768399 2646 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:08:07.769048 kubelet[2646]: I1002 19:08:07.768413 2646 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:08:07.769048 kubelet[2646]: I1002 19:08:07.768448 2646 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:08:07.778000 audit[2656]: USER_ACCT pid=2656 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:07.778000 audit[2656]: CRED_REFR pid=2656 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:07.779234 sudo[2656]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:08:07.779535 sudo[2656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:08:07.784000 audit[2656]: USER_START pid=2656 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:07.785649 kubelet[2646]: I1002 19:08:07.785632 2646 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:08:07.785817 kubelet[2646]: I1002 19:08:07.785760 2646 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:08:07.785938 kubelet[2646]: I1002 19:08:07.785927 2646 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:08:07.786055 kubelet[2646]: I1002 19:08:07.786046 2646 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:08:07.802843 kubelet[2646]: I1002 19:08:07.802805 2646 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:08:07.806813 kubelet[2646]: I1002 19:08:07.805833 2646 server.go:1168] "Started kubelet" Oct 2 19:08:07.820000 audit[2646]: AVC avc: denied { mac_admin } for pid=2646 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.820000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:08:07.820000 audit[2646]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008ebb00 a1=c00070e990 a2=c0008ebad0 a3=25 items=0 ppid=1 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.820000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:08:07.829413 kubelet[2646]: I1002 19:08:07.829393 2646 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:08:07.828000 audit[2646]: AVC avc: denied { mac_admin } for pid=2646 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.828000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:08:07.828000 audit[2646]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00070ac20 a1=c00070e9a8 a2=c0008ebb90 a3=25 items=0 ppid=1 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.828000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:08:07.829832 kubelet[2646]: I1002 19:08:07.829820 2646 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:08:07.829924 kubelet[2646]: I1002 19:08:07.829915 2646 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:08:07.839182 kubelet[2646]: I1002 19:08:07.839155 2646 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:08:07.843644 kubelet[2646]: I1002 19:08:07.840166 2646 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:08:07.843644 kubelet[2646]: I1002 19:08:07.841119 2646 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:08:07.844450 kubelet[2646]: I1002 19:08:07.844429 2646 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:08:07.845035 kubelet[2646]: E1002 19:08:07.845018 2646 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:08:07.845184 kubelet[2646]: E1002 19:08:07.845174 2646 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:08:07.849971 kubelet[2646]: I1002 19:08:07.849941 2646 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:08:07.943188 kubelet[2646]: I1002 19:08:07.943160 2646 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:08:07.951380 kubelet[2646]: I1002 19:08:07.951356 2646 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:08:07.951562 kubelet[2646]: I1002 19:08:07.951534 2646 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:08:07.951665 kubelet[2646]: I1002 19:08:07.951656 2646 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:08:07.951928 kubelet[2646]: I1002 19:08:07.951917 2646 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:08:07.952024 kubelet[2646]: I1002 19:08:07.952016 2646 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:08:07.952090 kubelet[2646]: I1002 19:08:07.952083 2646 policy_none.go:49] "None policy: Start" Oct 2 19:08:07.952868 kubelet[2646]: I1002 19:08:07.952854 2646 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:08:07.953001 kubelet[2646]: I1002 19:08:07.952990 2646 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:08:07.953225 kubelet[2646]: I1002 19:08:07.953214 2646 state_mem.go:75] "Updated machine memory state" Oct 2 19:08:07.959482 kubelet[2646]: I1002 19:08:07.959460 2646 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:08:07.958000 audit[2646]: AVC avc: denied { mac_admin } for pid=2646 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:07.958000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:08:07.958000 audit[2646]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d14ed0 a1=c0008e2cf0 a2=c000d14e70 a3=25 items=0 ppid=1 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:07.958000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:08:07.959997 kubelet[2646]: I1002 19:08:07.959983 2646 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:08:07.960278 kubelet[2646]: I1002 19:08:07.960267 2646 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:08:07.960957 kubelet[2646]: I1002 19:08:07.960942 2646 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:08:07.961075 kubelet[2646]: I1002 19:08:07.961064 2646 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:08:07.961160 kubelet[2646]: I1002 19:08:07.961152 2646 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:08:07.961268 kubelet[2646]: E1002 19:08:07.961260 2646 kubelet.go:2281] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:08:07.971525 kubelet[2646]: I1002 19:08:07.971500 2646 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-122" Oct 2 19:08:07.992237 kubelet[2646]: I1002 19:08:07.992103 2646 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-27-122" Oct 2 19:08:07.992473 kubelet[2646]: I1002 19:08:07.992460 2646 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-27-122" Oct 2 19:08:08.061758 kubelet[2646]: I1002 19:08:08.061657 2646 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:08:08.062048 kubelet[2646]: I1002 19:08:08.062031 2646 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:08:08.062326 kubelet[2646]: I1002 19:08:08.062311 2646 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:08:08.146778 kubelet[2646]: I1002 19:08:08.146719 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:08:08.146939 kubelet[2646]: I1002 19:08:08.146801 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/17d2428617922ecb86f859a8c32d63af-ca-certs\") pod \"kube-apiserver-ip-172-31-27-122\" (UID: \"17d2428617922ecb86f859a8c32d63af\") " pod="kube-system/kube-apiserver-ip-172-31-27-122" Oct 2 19:08:08.146939 kubelet[2646]: I1002 19:08:08.146832 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/17d2428617922ecb86f859a8c32d63af-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-122\" (UID: \"17d2428617922ecb86f859a8c32d63af\") " pod="kube-system/kube-apiserver-ip-172-31-27-122" Oct 2 19:08:08.146939 kubelet[2646]: I1002 19:08:08.146879 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/17d2428617922ecb86f859a8c32d63af-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-122\" (UID: \"17d2428617922ecb86f859a8c32d63af\") " pod="kube-system/kube-apiserver-ip-172-31-27-122" Oct 2 19:08:08.146939 kubelet[2646]: I1002 19:08:08.146908 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:08:08.147139 kubelet[2646]: I1002 19:08:08.146952 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:08:08.147139 kubelet[2646]: I1002 19:08:08.146982 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/785eb7609a86e002c0181f840ceff3db-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-122\" (UID: \"785eb7609a86e002c0181f840ceff3db\") " pod="kube-system/kube-scheduler-ip-172-31-27-122" Oct 2 19:08:08.147139 kubelet[2646]: I1002 19:08:08.147030 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:08:08.147139 kubelet[2646]: I1002 19:08:08.147063 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d5d267e9b076d7e600598902d0eeb199-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-122\" (UID: \"d5d267e9b076d7e600598902d0eeb199\") " pod="kube-system/kube-controller-manager-ip-172-31-27-122" Oct 2 19:08:08.667500 sudo[2656]: pam_unix(sudo:session): session closed for user root Oct 2 19:08:08.666000 audit[2656]: USER_END pid=2656 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:08.666000 audit[2656]: CRED_DISP pid=2656 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:08.740621 update_engine[1628]: I1002 19:08:08.739836 1628 update_attempter.cc:505] Updating boot flags... Oct 2 19:08:08.787330 kubelet[2646]: I1002 19:08:08.787296 2646 apiserver.go:52] "Watching apiserver" Oct 2 19:08:08.846973 kubelet[2646]: I1002 19:08:08.846842 2646 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:08:08.852130 kubelet[2646]: I1002 19:08:08.852026 2646 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:08:09.043534 kubelet[2646]: E1002 19:08:09.042752 2646 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-27-122\" already exists" pod="kube-system/kube-apiserver-ip-172-31-27-122" Oct 2 19:08:09.148786 kubelet[2646]: I1002 19:08:09.148731 2646 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-27-122" podStartSLOduration=1.147573931 podCreationTimestamp="2023-10-02 19:08:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:08:09.143755801 +0000 UTC m=+1.508550944" watchObservedRunningTime="2023-10-02 19:08:09.147573931 +0000 UTC m=+1.512369074" Oct 2 19:08:09.150791 kubelet[2646]: I1002 19:08:09.148989 2646 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-27-122" podStartSLOduration=1.148953747 podCreationTimestamp="2023-10-02 19:08:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:08:09.117839928 +0000 UTC m=+1.482635070" watchObservedRunningTime="2023-10-02 19:08:09.148953747 +0000 UTC m=+1.513748887" Oct 2 19:08:09.228965 kubelet[2646]: I1002 19:08:09.228929 2646 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-27-122" podStartSLOduration=1.228859134 podCreationTimestamp="2023-10-02 19:08:08 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:08:09.173578684 +0000 UTC m=+1.538373827" watchObservedRunningTime="2023-10-02 19:08:09.228859134 +0000 UTC m=+1.593654280" Oct 2 19:08:10.901715 sudo[1895]: pam_unix(sudo:session): session closed for user root Oct 2 19:08:10.901000 audit[1895]: USER_END pid=1895 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:10.909311 kernel: kauditd_printk_skb: 271 callbacks suppressed Oct 2 19:08:10.914791 kernel: audit: type=1106 audit(1696273690.901:974): pid=1895 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:10.914863 kernel: audit: type=1104 audit(1696273690.901:975): pid=1895 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:10.901000 audit[1895]: CRED_DISP pid=1895 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:08:10.939294 sshd[1892]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:10.942000 audit[1892]: USER_END pid=1892 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:10.947992 systemd-logind[1626]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:08:10.950455 systemd[1]: sshd@6-172.31.27.122:22-139.178.89.65:34160.service: Deactivated successfully. Oct 2 19:08:10.951547 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:08:10.951800 systemd[1]: session-7.scope: Consumed 4.366s CPU time. Oct 2 19:08:10.943000 audit[1892]: CRED_DISP pid=1892 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:10.953915 systemd-logind[1626]: Removed session 7. Oct 2 19:08:10.959101 kernel: audit: type=1106 audit(1696273690.942:976): pid=1892 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:10.959195 kernel: audit: type=1104 audit(1696273690.943:977): pid=1892 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:10.959248 kernel: audit: type=1131 audit(1696273690.950:978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.122:22-139.178.89.65:34160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:10.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.122:22-139.178.89.65:34160 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:19.991000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:19.999794 kernel: audit: type=1400 audit(1696273699.991:979): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:19.991000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010aea80 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:19.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:20.017229 kernel: audit: type=1300 audit(1696273699.991:979): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010aea80 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:20.017439 kernel: audit: type=1327 audit(1696273699.991:979): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:19.997000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:19.997000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010aebc0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:20.034640 kernel: audit: type=1400 audit(1696273699.997:980): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:20.034793 kernel: audit: type=1300 audit(1696273699.997:980): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010aebc0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:19.997000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:20.044796 kernel: audit: type=1327 audit(1696273699.997:980): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:19.998000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:20.053831 kernel: audit: type=1400 audit(1696273699.998:981): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:19.998000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010aed00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:20.067793 kernel: audit: type=1300 audit(1696273699.998:981): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010aed00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:20.068016 kernel: audit: type=1327 audit(1696273699.998:981): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:19.998000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:20.001000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:20.083292 kernel: audit: type=1400 audit(1696273700.001:982): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:08:20.001000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0011447c0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:20.001000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:20.884000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:08:20.884000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000fa2a00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:08:20.884000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:08:21.336867 kubelet[2646]: I1002 19:08:21.336826 2646 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:08:21.337699 env[1638]: time="2023-10-02T19:08:21.337652481Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:08:21.338321 kubelet[2646]: I1002 19:08:21.338303 2646 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:08:22.083420 kubelet[2646]: I1002 19:08:22.083371 2646 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:08:22.092006 systemd[1]: Created slice kubepods-besteffort-podb7e4739a_e7af_4398_821d_ac1d5de20969.slice. Oct 2 19:08:22.107094 kubelet[2646]: W1002 19:08:22.107062 2646 reflector.go:533] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-27-122" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-122' and this object Oct 2 19:08:22.107424 kubelet[2646]: E1002 19:08:22.107409 2646 reflector.go:148] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-27-122" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-122' and this object Oct 2 19:08:22.107657 kubelet[2646]: W1002 19:08:22.107639 2646 reflector.go:533] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-27-122" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-122' and this object Oct 2 19:08:22.107796 kubelet[2646]: E1002 19:08:22.107762 2646 reflector.go:148] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-27-122" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-122' and this object Oct 2 19:08:22.108207 kubelet[2646]: I1002 19:08:22.108189 2646 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:08:22.117172 systemd[1]: Created slice kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice. Oct 2 19:08:22.124060 kubelet[2646]: W1002 19:08:22.124029 2646 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-27-122" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-122' and this object Oct 2 19:08:22.124233 kubelet[2646]: E1002 19:08:22.124071 2646 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-27-122" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-27-122' and this object Oct 2 19:08:22.166537 kubelet[2646]: I1002 19:08:22.166494 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-twcjp\" (UniqueName: \"kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-kube-api-access-twcjp\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.166939 kubelet[2646]: I1002 19:08:22.166921 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-cgroup\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.167089 kubelet[2646]: I1002 19:08:22.167078 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-xtables-lock\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.167371 kubelet[2646]: I1002 19:08:22.167357 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-bpf-maps\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.167674 kubelet[2646]: I1002 19:08:22.167661 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-kernel\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.167817 kubelet[2646]: I1002 19:08:22.167805 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hubble-tls\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.167976 kubelet[2646]: I1002 19:08:22.167958 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b7e4739a-e7af-4398-821d-ac1d5de20969-lib-modules\") pod \"kube-proxy-v72m7\" (UID: \"b7e4739a-e7af-4398-821d-ac1d5de20969\") " pod="kube-system/kube-proxy-v72m7" Oct 2 19:08:22.168090 kubelet[2646]: I1002 19:08:22.168082 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-lib-modules\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.168229 kubelet[2646]: I1002 19:08:22.168219 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/b7e4739a-e7af-4398-821d-ac1d5de20969-kube-proxy\") pod \"kube-proxy-v72m7\" (UID: \"b7e4739a-e7af-4398-821d-ac1d5de20969\") " pod="kube-system/kube-proxy-v72m7" Oct 2 19:08:22.168371 kubelet[2646]: I1002 19:08:22.168362 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b7e4739a-e7af-4398-821d-ac1d5de20969-xtables-lock\") pod \"kube-proxy-v72m7\" (UID: \"b7e4739a-e7af-4398-821d-ac1d5de20969\") " pod="kube-system/kube-proxy-v72m7" Oct 2 19:08:22.168504 kubelet[2646]: I1002 19:08:22.168494 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hostproc\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.168635 kubelet[2646]: I1002 19:08:22.168627 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-net\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.168762 kubelet[2646]: I1002 19:08:22.168753 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zdc7v\" (UniqueName: \"kubernetes.io/projected/b7e4739a-e7af-4398-821d-ac1d5de20969-kube-api-access-zdc7v\") pod \"kube-proxy-v72m7\" (UID: \"b7e4739a-e7af-4398-821d-ac1d5de20969\") " pod="kube-system/kube-proxy-v72m7" Oct 2 19:08:22.168927 kubelet[2646]: I1002 19:08:22.168909 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cni-path\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.169050 kubelet[2646]: I1002 19:08:22.169042 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-etc-cni-netd\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.169271 kubelet[2646]: I1002 19:08:22.169250 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8a30ffe6-d3bd-466a-8178-e1adb81885f5-clustermesh-secrets\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.169420 kubelet[2646]: I1002 19:08:22.169403 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-run\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.169544 kubelet[2646]: I1002 19:08:22.169535 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-config-path\") pod \"cilium-lff7d\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " pod="kube-system/cilium-lff7d" Oct 2 19:08:22.415784 kubelet[2646]: I1002 19:08:22.415731 2646 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:08:22.423134 systemd[1]: Created slice kubepods-besteffort-poda6a33390_ddfc_46ba_945d_40f7b7db3834.slice. Oct 2 19:08:22.472007 kubelet[2646]: I1002 19:08:22.471973 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-646wq\" (UniqueName: \"kubernetes.io/projected/a6a33390-ddfc-46ba-945d-40f7b7db3834-kube-api-access-646wq\") pod \"cilium-operator-574c4bb98d-dldfh\" (UID: \"a6a33390-ddfc-46ba-945d-40f7b7db3834\") " pod="kube-system/cilium-operator-574c4bb98d-dldfh" Oct 2 19:08:22.472205 kubelet[2646]: I1002 19:08:22.472049 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a6a33390-ddfc-46ba-945d-40f7b7db3834-cilium-config-path\") pod \"cilium-operator-574c4bb98d-dldfh\" (UID: \"a6a33390-ddfc-46ba-945d-40f7b7db3834\") " pod="kube-system/cilium-operator-574c4bb98d-dldfh" Oct 2 19:08:23.273897 kubelet[2646]: E1002 19:08:23.273852 2646 configmap.go:199] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:08:23.274309 kubelet[2646]: E1002 19:08:23.274086 2646 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/b7e4739a-e7af-4398-821d-ac1d5de20969-kube-proxy podName:b7e4739a-e7af-4398-821d-ac1d5de20969 nodeName:}" failed. No retries permitted until 2023-10-02 19:08:23.774055574 +0000 UTC m=+16.138850719 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/b7e4739a-e7af-4398-821d-ac1d5de20969-kube-proxy") pod "kube-proxy-v72m7" (UID: "b7e4739a-e7af-4398-821d-ac1d5de20969") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:08:23.275351 kubelet[2646]: E1002 19:08:23.275306 2646 secret.go:194] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:08:23.275453 kubelet[2646]: E1002 19:08:23.275389 2646 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/8a30ffe6-d3bd-466a-8178-e1adb81885f5-clustermesh-secrets podName:8a30ffe6-d3bd-466a-8178-e1adb81885f5 nodeName:}" failed. No retries permitted until 2023-10-02 19:08:23.775370006 +0000 UTC m=+16.140165147 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/8a30ffe6-d3bd-466a-8178-e1adb81885f5-clustermesh-secrets") pod "cilium-lff7d" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:08:23.332275 env[1638]: time="2023-10-02T19:08:23.332202681Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-dldfh,Uid:a6a33390-ddfc-46ba-945d-40f7b7db3834,Namespace:kube-system,Attempt:0,}" Oct 2 19:08:23.361423 env[1638]: time="2023-10-02T19:08:23.361047570Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:08:23.361423 env[1638]: time="2023-10-02T19:08:23.361388718Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:08:23.361658 env[1638]: time="2023-10-02T19:08:23.361406486Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:08:23.361981 env[1638]: time="2023-10-02T19:08:23.361938257Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b pid=2986 runtime=io.containerd.runc.v2 Oct 2 19:08:23.385324 systemd[1]: Started cri-containerd-3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b.scope. Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.406000 audit: BPF prog-id=112 op=LOAD Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2986 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337303031343863353136353431633931346538366231626639306533 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2986 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337303031343863353136353431633931346538366231626639306533 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.407000 audit: BPF prog-id=113 op=LOAD Oct 2 19:08:23.407000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00018bfc0 items=0 ppid=2986 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337303031343863353136353431633931346538366231626639306533 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.408000 audit: BPF prog-id=114 op=LOAD Oct 2 19:08:23.408000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ce008 items=0 ppid=2986 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337303031343863353136353431633931346538366231626639306533 Oct 2 19:08:23.409000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:08:23.409000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { perfmon } for pid=2995 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit[2995]: AVC avc: denied { bpf } for pid=2995 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.409000 audit: BPF prog-id=115 op=LOAD Oct 2 19:08:23.409000 audit[2995]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001ce418 items=0 ppid=2986 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337303031343863353136353431633931346538366231626639306533 Oct 2 19:08:23.449332 env[1638]: time="2023-10-02T19:08:23.449293441Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-dldfh,Uid:a6a33390-ddfc-46ba-945d-40f7b7db3834,Namespace:kube-system,Attempt:0,} returns sandbox id \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\"" Oct 2 19:08:23.452252 env[1638]: time="2023-10-02T19:08:23.452217562Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:08:23.901825 env[1638]: time="2023-10-02T19:08:23.901707572Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-v72m7,Uid:b7e4739a-e7af-4398-821d-ac1d5de20969,Namespace:kube-system,Attempt:0,}" Oct 2 19:08:23.919193 env[1638]: time="2023-10-02T19:08:23.919115141Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:08:23.919502 env[1638]: time="2023-10-02T19:08:23.919155855Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:08:23.919502 env[1638]: time="2023-10-02T19:08:23.919171356Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:08:23.919682 env[1638]: time="2023-10-02T19:08:23.919587317Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/046ed69e2492f6a1a443b3082216efba907428494d774b3ec8dc205ecdc899f7 pid=3029 runtime=io.containerd.runc.v2 Oct 2 19:08:23.921003 env[1638]: time="2023-10-02T19:08:23.920962152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lff7d,Uid:8a30ffe6-d3bd-466a-8178-e1adb81885f5,Namespace:kube-system,Attempt:0,}" Oct 2 19:08:23.935687 systemd[1]: Started cri-containerd-046ed69e2492f6a1a443b3082216efba907428494d774b3ec8dc205ecdc899f7.scope. Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.957000 audit: BPF prog-id=116 op=LOAD Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3029 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366564363965323439326636613161343433623330383232313665 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3029 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366564363965323439326636613161343433623330383232313665 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit: BPF prog-id=117 op=LOAD Oct 2 19:08:23.958000 audit[3039]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000288930 items=0 ppid=3029 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366564363965323439326636613161343433623330383232313665 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit: BPF prog-id=118 op=LOAD Oct 2 19:08:23.958000 audit[3039]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000288978 items=0 ppid=3029 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366564363965323439326636613161343433623330383232313665 Oct 2 19:08:23.958000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:08:23.958000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { perfmon } for pid=3039 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit[3039]: AVC avc: denied { bpf } for pid=3039 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:23.958000 audit: BPF prog-id=119 op=LOAD Oct 2 19:08:23.958000 audit[3039]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000288d88 items=0 ppid=3029 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:23.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034366564363965323439326636613161343433623330383232313665 Oct 2 19:08:23.964942 env[1638]: time="2023-10-02T19:08:23.963981374Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:08:23.964942 env[1638]: time="2023-10-02T19:08:23.964096393Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:08:23.964942 env[1638]: time="2023-10-02T19:08:23.964125213Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:08:23.964942 env[1638]: time="2023-10-02T19:08:23.964329711Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24 pid=3064 runtime=io.containerd.runc.v2 Oct 2 19:08:23.986663 env[1638]: time="2023-10-02T19:08:23.986613837Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-v72m7,Uid:b7e4739a-e7af-4398-821d-ac1d5de20969,Namespace:kube-system,Attempt:0,} returns sandbox id \"046ed69e2492f6a1a443b3082216efba907428494d774b3ec8dc205ecdc899f7\"" Oct 2 19:08:23.991808 env[1638]: time="2023-10-02T19:08:23.991744997Z" level=info msg="CreateContainer within sandbox \"046ed69e2492f6a1a443b3082216efba907428494d774b3ec8dc205ecdc899f7\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:08:24.002219 systemd[1]: Started cri-containerd-99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24.scope. Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit: BPF prog-id=120 op=LOAD Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3064 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303033656665386262323733623430313863653564386535626534 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3064 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303033656665386262323733623430313863653564386535626534 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit: BPF prog-id=121 op=LOAD Oct 2 19:08:24.021000 audit[3074]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001dd9b0 items=0 ppid=3064 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303033656665386262323733623430313863653564386535626534 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.021000 audit: BPF prog-id=122 op=LOAD Oct 2 19:08:24.021000 audit[3074]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001dd9f8 items=0 ppid=3064 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303033656665386262323733623430313863653564386535626534 Oct 2 19:08:24.021000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:08:24.022000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { perfmon } for pid=3074 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit[3074]: AVC avc: denied { bpf } for pid=3074 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.022000 audit: BPF prog-id=123 op=LOAD Oct 2 19:08:24.022000 audit[3074]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0001dde08 items=0 ppid=3064 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939303033656665386262323733623430313863653564386535626534 Oct 2 19:08:24.025667 env[1638]: time="2023-10-02T19:08:24.025612431Z" level=info msg="CreateContainer within sandbox \"046ed69e2492f6a1a443b3082216efba907428494d774b3ec8dc205ecdc899f7\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"79f4aab62b89c83e442adcd2e884b994984097729bab5d427faed5bf5d9b2760\"" Oct 2 19:08:24.027258 env[1638]: time="2023-10-02T19:08:24.027226296Z" level=info msg="StartContainer for \"79f4aab62b89c83e442adcd2e884b994984097729bab5d427faed5bf5d9b2760\"" Oct 2 19:08:24.050299 env[1638]: time="2023-10-02T19:08:24.050241492Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lff7d,Uid:8a30ffe6-d3bd-466a-8178-e1adb81885f5,Namespace:kube-system,Attempt:0,} returns sandbox id \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\"" Oct 2 19:08:24.069295 systemd[1]: Started cri-containerd-79f4aab62b89c83e442adcd2e884b994984097729bab5d427faed5bf5d9b2760.scope. Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3029 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739663461616236326238396338336534343261646364326538383462 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.098000 audit: BPF prog-id=124 op=LOAD Oct 2 19:08:24.098000 audit[3112]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000277c70 items=0 ppid=3029 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.098000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739663461616236326238396338336534343261646364326538383462 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.099000 audit: BPF prog-id=125 op=LOAD Oct 2 19:08:24.099000 audit[3112]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000277cb8 items=0 ppid=3029 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739663461616236326238396338336534343261646364326538383462 Oct 2 19:08:24.100000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:08:24.100000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { perfmon } for pid=3112 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit[3112]: AVC avc: denied { bpf } for pid=3112 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:24.100000 audit: BPF prog-id=126 op=LOAD Oct 2 19:08:24.100000 audit[3112]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000277d48 items=0 ppid=3029 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739663461616236326238396338336534343261646364326538383462 Oct 2 19:08:24.125254 env[1638]: time="2023-10-02T19:08:24.125165624Z" level=info msg="StartContainer for \"79f4aab62b89c83e442adcd2e884b994984097729bab5d427faed5bf5d9b2760\" returns successfully" Oct 2 19:08:24.583000 audit[3163]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.583000 audit[3163]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf7a080b0 a2=0 a3=7ffcf7a0809c items=0 ppid=3123 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.583000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:08:24.586000 audit[3164]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.586000 audit[3164]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc29d1fef0 a2=0 a3=7ffc29d1fedc items=0 ppid=3123 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.586000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:08:24.588000 audit[3165]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=3165 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.588000 audit[3165]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec2eb6fd0 a2=0 a3=7ffec2eb6fbc items=0 ppid=3123 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.588000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:08:24.589000 audit[3166]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.589000 audit[3166]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff603bb540 a2=0 a3=7fff603bb52c items=0 ppid=3123 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.589000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:08:24.591000 audit[3168]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.591000 audit[3168]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdef022820 a2=0 a3=7ffdef02280c items=0 ppid=3123 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.591000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:08:24.594000 audit[3169]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.594000 audit[3169]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff9805a30 a2=0 a3=7ffff9805a1c items=0 ppid=3123 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.594000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:08:24.694000 audit[3170]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.694000 audit[3170]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd99bb65b0 a2=0 a3=7ffd99bb659c items=0 ppid=3123 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.694000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:08:24.703000 audit[3172]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.703000 audit[3172]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffef1da0e80 a2=0 a3=7ffef1da0e6c items=0 ppid=3123 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.703000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:08:24.718000 audit[3175]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.718000 audit[3175]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdbc177060 a2=0 a3=7ffdbc17704c items=0 ppid=3123 pid=3175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.718000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:08:24.722000 audit[3176]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.722000 audit[3176]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd0553e00 a2=0 a3=7ffcd0553dec items=0 ppid=3123 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.722000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:08:24.727000 audit[3178]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.727000 audit[3178]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc29855290 a2=0 a3=7ffc2985527c items=0 ppid=3123 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.727000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:08:24.729000 audit[3179]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.729000 audit[3179]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff929812e0 a2=0 a3=7fff929812cc items=0 ppid=3123 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.729000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:08:24.734000 audit[3181]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.734000 audit[3181]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc80c965a0 a2=0 a3=7ffc80c9658c items=0 ppid=3123 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.734000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:08:24.740000 audit[3184]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.740000 audit[3184]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffff57a3de0 a2=0 a3=7ffff57a3dcc items=0 ppid=3123 pid=3184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.740000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:08:24.742000 audit[3185]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.742000 audit[3185]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcab34cce0 a2=0 a3=7ffcab34cccc items=0 ppid=3123 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.742000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:08:24.746000 audit[3187]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.746000 audit[3187]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd93b77680 a2=0 a3=7ffd93b7766c items=0 ppid=3123 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:08:24.750000 audit[3188]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.750000 audit[3188]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe2e58ca10 a2=0 a3=7ffe2e58c9fc items=0 ppid=3123 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.750000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:08:24.756000 audit[3190]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.756000 audit[3190]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc984624c0 a2=0 a3=7ffc984624ac items=0 ppid=3123 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:08:24.764000 audit[3193]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.764000 audit[3193]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdaadafca0 a2=0 a3=7ffdaadafc8c items=0 ppid=3123 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.764000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:08:24.771000 audit[3196]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.771000 audit[3196]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcb88c09d0 a2=0 a3=7ffcb88c09bc items=0 ppid=3123 pid=3196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:08:24.773000 audit[3197]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.773000 audit[3197]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc66cf4fa0 a2=0 a3=7ffc66cf4f8c items=0 ppid=3123 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.773000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:08:24.778000 audit[3199]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.778000 audit[3199]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff08696850 a2=0 a3=7fff0869683c items=0 ppid=3123 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.778000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:08:24.787000 audit[3202]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.787000 audit[3202]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcc2d1c2a0 a2=0 a3=7ffcc2d1c28c items=0 ppid=3123 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.787000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:08:24.798000 audit[3207]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.798000 audit[3207]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2c3a71b0 a2=0 a3=7fff2c3a719c items=0 ppid=3123 pid=3207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.798000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:08:24.806000 audit[3209]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:08:24.806000 audit[3209]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc59505bd0 a2=0 a3=7ffc59505bbc items=0 ppid=3123 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.806000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:08:24.841000 audit[3211]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:24.841000 audit[3211]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffd01700f50 a2=0 a3=7ffd01700f3c items=0 ppid=3123 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:24.856000 audit[3211]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:24.856000 audit[3211]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffd01700f50 a2=0 a3=7ffd01700f3c items=0 ppid=3123 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:24.866000 audit[3218]: NETFILTER_CFG table=filter:65 family=2 entries=14 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:24.866000 audit[3218]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fffec3b5580 a2=0 a3=7fffec3b556c items=0 ppid=3123 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:24.867000 audit[3218]: NETFILTER_CFG table=nat:66 family=2 entries=12 op=nft_register_rule pid=3218 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:08:24.867000 audit[3218]: SYSCALL arch=c000003e syscall=46 success=yes exit=2572 a0=3 a1=7fffec3b5580 a2=0 a3=31030 items=0 ppid=3123 pid=3218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.867000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:24.873000 audit[3219]: NETFILTER_CFG table=filter:67 family=10 entries=1 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.873000 audit[3219]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffc2c59ee0 a2=0 a3=7fffc2c59ecc items=0 ppid=3123 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.873000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:08:24.879000 audit[3221]: NETFILTER_CFG table=filter:68 family=10 entries=2 op=nft_register_chain pid=3221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.879000 audit[3221]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc60f195e0 a2=0 a3=7ffc60f195cc items=0 ppid=3123 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.879000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:08:24.884000 audit[3224]: NETFILTER_CFG table=filter:69 family=10 entries=2 op=nft_register_chain pid=3224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.884000 audit[3224]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd1eba6e80 a2=0 a3=7ffd1eba6e6c items=0 ppid=3123 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:08:24.886000 audit[3225]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.886000 audit[3225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdcfe72aa0 a2=0 a3=7ffdcfe72a8c items=0 ppid=3123 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.886000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:08:24.891000 audit[3227]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.891000 audit[3227]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe4a222690 a2=0 a3=7ffe4a22267c items=0 ppid=3123 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.891000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:08:24.892000 audit[3228]: NETFILTER_CFG table=filter:72 family=10 entries=1 op=nft_register_chain pid=3228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.892000 audit[3228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf9a45360 a2=0 a3=7ffcf9a4534c items=0 ppid=3123 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.892000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:08:24.896000 audit[3230]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_rule pid=3230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.896000 audit[3230]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff6768fd20 a2=0 a3=7fff6768fd0c items=0 ppid=3123 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.896000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:08:24.900000 audit[3233]: NETFILTER_CFG table=filter:74 family=10 entries=2 op=nft_register_chain pid=3233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.900000 audit[3233]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd92610400 a2=0 a3=7ffd926103ec items=0 ppid=3123 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.900000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:08:24.901000 audit[3234]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.901000 audit[3234]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdc8e05980 a2=0 a3=7ffdc8e0596c items=0 ppid=3123 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.901000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:08:24.904000 audit[3236]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.904000 audit[3236]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcf1608650 a2=0 a3=7ffcf160863c items=0 ppid=3123 pid=3236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.904000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:08:24.906000 audit[3237]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_chain pid=3237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.906000 audit[3237]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc76f1f520 a2=0 a3=7ffc76f1f50c items=0 ppid=3123 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.906000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:08:24.909000 audit[3239]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.909000 audit[3239]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe473047d0 a2=0 a3=7ffe473047bc items=0 ppid=3123 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.909000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:08:24.919000 audit[3242]: NETFILTER_CFG table=filter:79 family=10 entries=1 op=nft_register_rule pid=3242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.919000 audit[3242]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeca126a20 a2=0 a3=7ffeca126a0c items=0 ppid=3123 pid=3242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.919000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:08:24.925000 audit[3245]: NETFILTER_CFG table=filter:80 family=10 entries=1 op=nft_register_rule pid=3245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.925000 audit[3245]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe9f2c7cf0 a2=0 a3=7ffe9f2c7cdc items=0 ppid=3123 pid=3245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.925000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:08:24.927000 audit[3246]: NETFILTER_CFG table=nat:81 family=10 entries=1 op=nft_register_chain pid=3246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.927000 audit[3246]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffdb4fc3e0 a2=0 a3=7fffdb4fc3cc items=0 ppid=3123 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:08:24.931000 audit[3248]: NETFILTER_CFG table=nat:82 family=10 entries=2 op=nft_register_chain pid=3248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.931000 audit[3248]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd9a2014a0 a2=0 a3=7ffd9a20148c items=0 ppid=3123 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.931000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:08:24.936000 audit[3251]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.936000 audit[3251]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffd74200e0 a2=0 a3=7fffd74200cc items=0 ppid=3123 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.936000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:08:24.945000 audit[3252]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.945000 audit[3252]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe305b0bb0 a2=0 a3=7ffe305b0b9c items=0 ppid=3123 pid=3252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.945000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:08:24.953000 audit[3254]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.953000 audit[3254]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc74bb17a0 a2=0 a3=7ffc74bb178c items=0 ppid=3123 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.953000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:08:24.960000 audit[3257]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.960000 audit[3257]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe8c956ee0 a2=0 a3=7ffe8c956ecc items=0 ppid=3123 pid=3257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.960000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:08:24.961000 audit[3258]: NETFILTER_CFG table=nat:87 family=10 entries=1 op=nft_register_chain pid=3258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.961000 audit[3258]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda1670bf0 a2=0 a3=7ffda1670bdc items=0 ppid=3123 pid=3258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.961000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:08:24.965491 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount101267344.mount: Deactivated successfully. Oct 2 19:08:24.968000 audit[3260]: NETFILTER_CFG table=nat:88 family=10 entries=2 op=nft_register_chain pid=3260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:08:24.968000 audit[3260]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc553a9dc0 a2=0 a3=7ffc553a9dac items=0 ppid=3123 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:08:24.972000 audit[3262]: NETFILTER_CFG table=filter:89 family=10 entries=3 op=nft_register_rule pid=3262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:08:24.972000 audit[3262]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7fff45d0b060 a2=0 a3=7fff45d0b04c items=0 ppid=3123 pid=3262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.972000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:24.973000 audit[3262]: NETFILTER_CFG table=nat:90 family=10 entries=7 op=nft_register_chain pid=3262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:08:24.973000 audit[3262]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7fff45d0b060 a2=0 a3=7fff45d0b04c items=0 ppid=3123 pid=3262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:24.973000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:08:25.145273 kubelet[2646]: I1002 19:08:25.145244 2646 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-v72m7" podStartSLOduration=3.145204133 podCreationTimestamp="2023-10-02 19:08:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:08:25.144988022 +0000 UTC m=+17.509783167" watchObservedRunningTime="2023-10-02 19:08:25.145204133 +0000 UTC m=+17.509999277" Oct 2 19:08:26.972192 env[1638]: time="2023-10-02T19:08:26.972146337Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:26.975556 env[1638]: time="2023-10-02T19:08:26.975497980Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:26.977798 env[1638]: time="2023-10-02T19:08:26.977744620Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:26.978775 env[1638]: time="2023-10-02T19:08:26.978726998Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:08:26.983048 env[1638]: time="2023-10-02T19:08:26.983000973Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:08:26.984210 env[1638]: time="2023-10-02T19:08:26.984173439Z" level=info msg="CreateContainer within sandbox \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:08:27.007936 env[1638]: time="2023-10-02T19:08:27.007891570Z" level=info msg="CreateContainer within sandbox \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\"" Oct 2 19:08:27.011603 env[1638]: time="2023-10-02T19:08:27.008610593Z" level=info msg="StartContainer for \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\"" Oct 2 19:08:27.040989 systemd[1]: Started cri-containerd-d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318.scope. Oct 2 19:08:27.065794 kernel: kauditd_printk_skb: 378 callbacks suppressed Oct 2 19:08:27.065953 kernel: audit: type=1400 audit(1696273707.059:1097): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070977 kernel: audit: type=1400 audit(1696273707.059:1098): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.078789 kernel: audit: type=1400 audit(1696273707.059:1099): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.091156 kernel: audit: type=1400 audit(1696273707.059:1100): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.091275 kernel: audit: type=1400 audit(1696273707.059:1101): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.103053 kernel: audit: type=1400 audit(1696273707.059:1102): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.103223 kernel: audit: type=1400 audit(1696273707.059:1103): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.108175 kernel: audit: type=1400 audit(1696273707.059:1104): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.113614 kernel: audit: type=1400 audit(1696273707.059:1105): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.119145 kernel: audit: type=1400 audit(1696273707.065:1106): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.065000 audit: BPF prog-id=127 op=LOAD Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2986 pid=3273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:27.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436376530356566636663613762333663343262376234396465353764 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.120149 env[1638]: time="2023-10-02T19:08:27.120098941Z" level=info msg="StartContainer for \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\" returns successfully" Oct 2 19:08:27.070000 audit[3273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2986 pid=3273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:27.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436376530356566636663613762333663343262376234396465353764 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit: BPF prog-id=128 op=LOAD Oct 2 19:08:27.070000 audit[3273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000305cd0 items=0 ppid=2986 pid=3273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:27.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436376530356566636663613762333663343262376234396465353764 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit: BPF prog-id=129 op=LOAD Oct 2 19:08:27.070000 audit[3273]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000305d18 items=0 ppid=2986 pid=3273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:27.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436376530356566636663613762333663343262376234396465353764 Oct 2 19:08:27.070000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:08:27.070000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { perfmon } for pid=3273 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit[3273]: AVC avc: denied { bpf } for pid=3273 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:08:27.070000 audit: BPF prog-id=130 op=LOAD Oct 2 19:08:27.070000 audit[3273]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00035e128 items=0 ppid=2986 pid=3273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:27.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436376530356566636663613762333663343262376234396465353764 Oct 2 19:08:27.146229 kubelet[2646]: I1002 19:08:27.146194 2646 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-dldfh" podStartSLOduration=1.617851363 podCreationTimestamp="2023-10-02 19:08:22 +0000 UTC" firstStartedPulling="2023-10-02 19:08:23.450905845 +0000 UTC m=+15.815700967" lastFinishedPulling="2023-10-02 19:08:26.979186917 +0000 UTC m=+19.343982056" observedRunningTime="2023-10-02 19:08:27.145908284 +0000 UTC m=+19.510703429" watchObservedRunningTime="2023-10-02 19:08:27.146132452 +0000 UTC m=+19.510927597" Oct 2 19:08:27.158000 audit[3283]: AVC avc: denied { map_create } for pid=3283 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c564,c674 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c564,c674 tclass=bpf permissive=0 Oct 2 19:08:27.158000 audit[3283]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0000e17d0 a2=48 a3=0 items=0 ppid=2986 pid=3283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c564,c674 key=(null) Oct 2 19:08:27.158000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:08:33.443297 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1230423601.mount: Deactivated successfully. Oct 2 19:08:37.399922 env[1638]: time="2023-10-02T19:08:37.399837277Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:37.405610 env[1638]: time="2023-10-02T19:08:37.405321573Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:37.408412 env[1638]: time="2023-10-02T19:08:37.408378028Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:08:37.409088 env[1638]: time="2023-10-02T19:08:37.409029875Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:08:37.415200 env[1638]: time="2023-10-02T19:08:37.415162758Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:08:37.429930 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1675108466.mount: Deactivated successfully. Oct 2 19:08:37.436452 env[1638]: time="2023-10-02T19:08:37.436411206Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\"" Oct 2 19:08:37.439163 env[1638]: time="2023-10-02T19:08:37.437421907Z" level=info msg="StartContainer for \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\"" Oct 2 19:08:37.484176 systemd[1]: run-containerd-runc-k8s.io-c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f-runc.WCifGI.mount: Deactivated successfully. Oct 2 19:08:37.494729 systemd[1]: Started cri-containerd-c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f.scope. Oct 2 19:08:37.514164 systemd[1]: cri-containerd-c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f.scope: Deactivated successfully. Oct 2 19:08:37.633058 env[1638]: time="2023-10-02T19:08:37.632997422Z" level=info msg="shim disconnected" id=c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f Oct 2 19:08:37.633058 env[1638]: time="2023-10-02T19:08:37.633055995Z" level=warning msg="cleaning up after shim disconnected" id=c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f namespace=k8s.io Oct 2 19:08:37.633058 env[1638]: time="2023-10-02T19:08:37.633067734Z" level=info msg="cleaning up dead shim" Oct 2 19:08:37.645036 env[1638]: time="2023-10-02T19:08:37.644893856Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3332 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:08:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:08:37.645316 env[1638]: time="2023-10-02T19:08:37.645205110Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:08:37.645800 env[1638]: time="2023-10-02T19:08:37.645742583Z" level=error msg="Failed to pipe stderr of container \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\"" error="reading from a closed fifo" Oct 2 19:08:37.647010 env[1638]: time="2023-10-02T19:08:37.646873464Z" level=error msg="Failed to pipe stdout of container \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\"" error="reading from a closed fifo" Oct 2 19:08:37.652047 env[1638]: time="2023-10-02T19:08:37.651910983Z" level=error msg="StartContainer for \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:08:37.652917 kubelet[2646]: E1002 19:08:37.652892 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f" Oct 2 19:08:37.654050 kubelet[2646]: E1002 19:08:37.653878 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:08:37.654050 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:08:37.654050 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:08:37.654282 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-twcjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:08:37.654282 kubelet[2646]: E1002 19:08:37.653955 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:08:38.241360 env[1638]: time="2023-10-02T19:08:38.241038306Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:08:38.271912 env[1638]: time="2023-10-02T19:08:38.271859840Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\"" Oct 2 19:08:38.280473 env[1638]: time="2023-10-02T19:08:38.280417740Z" level=info msg="StartContainer for \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\"" Oct 2 19:08:38.303072 systemd[1]: Started cri-containerd-665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810.scope. Oct 2 19:08:38.321142 systemd[1]: cri-containerd-665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810.scope: Deactivated successfully. Oct 2 19:08:38.339955 env[1638]: time="2023-10-02T19:08:38.339896768Z" level=info msg="shim disconnected" id=665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810 Oct 2 19:08:38.339955 env[1638]: time="2023-10-02T19:08:38.339953255Z" level=warning msg="cleaning up after shim disconnected" id=665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810 namespace=k8s.io Oct 2 19:08:38.340283 env[1638]: time="2023-10-02T19:08:38.339965072Z" level=info msg="cleaning up dead shim" Oct 2 19:08:38.349872 env[1638]: time="2023-10-02T19:08:38.349814070Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:38Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3368 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:08:38Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:08:38.350169 env[1638]: time="2023-10-02T19:08:38.350107754Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 19:08:38.351882 env[1638]: time="2023-10-02T19:08:38.351834878Z" level=error msg="Failed to pipe stderr of container \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\"" error="reading from a closed fifo" Oct 2 19:08:38.351986 env[1638]: time="2023-10-02T19:08:38.351903350Z" level=error msg="Failed to pipe stdout of container \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\"" error="reading from a closed fifo" Oct 2 19:08:38.353980 env[1638]: time="2023-10-02T19:08:38.353935277Z" level=error msg="StartContainer for \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:08:38.354244 kubelet[2646]: E1002 19:08:38.354219 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810" Oct 2 19:08:38.354374 kubelet[2646]: E1002 19:08:38.354347 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:08:38.354374 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:08:38.354374 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:08:38.354374 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-twcjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:08:38.354608 kubelet[2646]: E1002 19:08:38.354397 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:08:38.425807 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f-rootfs.mount: Deactivated successfully. Oct 2 19:08:39.242035 kubelet[2646]: I1002 19:08:39.242010 2646 scope.go:115] "RemoveContainer" containerID="c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f" Oct 2 19:08:39.242802 kubelet[2646]: I1002 19:08:39.242786 2646 scope.go:115] "RemoveContainer" containerID="c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f" Oct 2 19:08:39.245222 env[1638]: time="2023-10-02T19:08:39.245181475Z" level=info msg="RemoveContainer for \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\"" Oct 2 19:08:39.245835 env[1638]: time="2023-10-02T19:08:39.245805501Z" level=info msg="RemoveContainer for \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\"" Oct 2 19:08:39.245974 env[1638]: time="2023-10-02T19:08:39.245923974Z" level=error msg="RemoveContainer for \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\" failed" error="failed to set removing state for container \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\": container is already in removing state" Oct 2 19:08:39.246250 kubelet[2646]: E1002 19:08:39.246220 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\": container is already in removing state" containerID="c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f" Oct 2 19:08:39.246358 kubelet[2646]: E1002 19:08:39.246345 2646 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f": container is already in removing state; Skipping pod "cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)" Oct 2 19:08:39.246721 kubelet[2646]: E1002 19:08:39.246699 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:08:39.251748 env[1638]: time="2023-10-02T19:08:39.251693529Z" level=info msg="RemoveContainer for \"c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f\" returns successfully" Oct 2 19:08:40.246398 kubelet[2646]: E1002 19:08:40.246373 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:08:40.743181 kubelet[2646]: W1002 19:08:40.743128 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice/cri-containerd-c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f.scope WatchSource:0}: container "c3707351ce257b95830fec7169dc238c2367b5025613297d172cc9023684d00f" in namespace "k8s.io": not found Oct 2 19:08:43.853020 kubelet[2646]: W1002 19:08:43.852980 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice/cri-containerd-665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810.scope WatchSource:0}: task 665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810 not found: not found Oct 2 19:08:53.366855 systemd[1]: Started sshd@7-172.31.27.122:22-139.178.89.65:38836.service. Oct 2 19:08:53.374851 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:08:53.375005 kernel: audit: type=1130 audit(1696273733.367:1116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.122:22-139.178.89.65:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:53.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.122:22-139.178.89.65:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:53.570000 audit[3382]: USER_ACCT pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.571325 sshd[3382]: Accepted publickey for core from 139.178.89.65 port 38836 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:08:53.580906 kernel: audit: type=1101 audit(1696273733.570:1117): pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.580000 audit[3382]: CRED_ACQ pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.584846 sshd[3382]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:08:53.593185 systemd[1]: Started session-8.scope. Oct 2 19:08:53.595695 kernel: audit: type=1103 audit(1696273733.580:1118): pid=3382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.595804 kernel: audit: type=1006 audit(1696273733.580:1119): pid=3382 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:08:53.595863 kernel: audit: type=1300 audit(1696273733.580:1119): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9aab1740 a2=3 a3=0 items=0 ppid=1 pid=3382 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:53.580000 audit[3382]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9aab1740 a2=3 a3=0 items=0 ppid=1 pid=3382 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:08:53.594906 systemd-logind[1626]: New session 8 of user core. Oct 2 19:08:53.580000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:53.612661 kernel: audit: type=1327 audit(1696273733.580:1119): proctitle=737368643A20636F7265205B707269765D Oct 2 19:08:53.611000 audit[3382]: USER_START pid=3382 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.615000 audit[3384]: CRED_ACQ pid=3384 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.631829 kernel: audit: type=1105 audit(1696273733.611:1120): pid=3382 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.631979 kernel: audit: type=1103 audit(1696273733.615:1121): pid=3384 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:53.969480 env[1638]: time="2023-10-02T19:08:53.968157718Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:08:53.988719 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3490715412.mount: Deactivated successfully. Oct 2 19:08:54.005272 env[1638]: time="2023-10-02T19:08:54.005218743Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\"" Oct 2 19:08:54.007615 env[1638]: time="2023-10-02T19:08:54.007588652Z" level=info msg="StartContainer for \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\"" Oct 2 19:08:54.036174 systemd[1]: Started cri-containerd-a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d.scope. Oct 2 19:08:54.058492 systemd[1]: cri-containerd-a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d.scope: Deactivated successfully. Oct 2 19:08:54.086169 env[1638]: time="2023-10-02T19:08:54.086073489Z" level=info msg="shim disconnected" id=a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d Oct 2 19:08:54.086169 env[1638]: time="2023-10-02T19:08:54.086161959Z" level=warning msg="cleaning up after shim disconnected" id=a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d namespace=k8s.io Oct 2 19:08:54.087256 env[1638]: time="2023-10-02T19:08:54.086174489Z" level=info msg="cleaning up dead shim" Oct 2 19:08:54.102685 env[1638]: time="2023-10-02T19:08:54.102596576Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:08:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3427 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:08:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:08:54.104038 env[1638]: time="2023-10-02T19:08:54.103384465Z" level=error msg="copy shim log" error="read /proc/self/fd/58: file already closed" Oct 2 19:08:54.104317 env[1638]: time="2023-10-02T19:08:54.103682175Z" level=error msg="Failed to pipe stdout of container \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\"" error="reading from a closed fifo" Oct 2 19:08:54.104433 env[1638]: time="2023-10-02T19:08:54.103747179Z" level=error msg="Failed to pipe stderr of container \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\"" error="reading from a closed fifo" Oct 2 19:08:54.106175 env[1638]: time="2023-10-02T19:08:54.106130900Z" level=error msg="StartContainer for \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:08:54.106548 kubelet[2646]: E1002 19:08:54.106523 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d" Oct 2 19:08:54.107248 kubelet[2646]: E1002 19:08:54.106667 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:08:54.107248 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:08:54.107248 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:08:54.107248 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-twcjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:08:54.107248 kubelet[2646]: E1002 19:08:54.106719 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:08:54.128416 sshd[3382]: pam_unix(sshd:session): session closed for user core Oct 2 19:08:54.129000 audit[3382]: USER_END pid=3382 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:54.132450 systemd[1]: sshd@7-172.31.27.122:22-139.178.89.65:38836.service: Deactivated successfully. Oct 2 19:08:54.133429 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:08:54.135393 systemd-logind[1626]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:08:54.136691 systemd-logind[1626]: Removed session 8. Oct 2 19:08:54.137831 kernel: audit: type=1106 audit(1696273734.129:1122): pid=3382 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:54.137909 kernel: audit: type=1104 audit(1696273734.129:1123): pid=3382 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:54.129000 audit[3382]: CRED_DISP pid=3382 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:08:54.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.122:22-139.178.89.65:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:08:54.279649 kubelet[2646]: I1002 19:08:54.278325 2646 scope.go:115] "RemoveContainer" containerID="665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810" Oct 2 19:08:54.279947 kubelet[2646]: I1002 19:08:54.279928 2646 scope.go:115] "RemoveContainer" containerID="665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810" Oct 2 19:08:54.287871 env[1638]: time="2023-10-02T19:08:54.286462081Z" level=info msg="RemoveContainer for \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\"" Oct 2 19:08:54.288421 env[1638]: time="2023-10-02T19:08:54.287928761Z" level=info msg="RemoveContainer for \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\"" Oct 2 19:08:54.288622 env[1638]: time="2023-10-02T19:08:54.288557719Z" level=error msg="RemoveContainer for \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\" failed" error="failed to set removing state for container \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\": container is already in removing state" Oct 2 19:08:54.289052 kubelet[2646]: E1002 19:08:54.289032 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\": container is already in removing state" containerID="665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810" Oct 2 19:08:54.289241 kubelet[2646]: I1002 19:08:54.289078 2646 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810} err="rpc error: code = Unknown desc = failed to set removing state for container \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\": container is already in removing state" Oct 2 19:08:54.296526 env[1638]: time="2023-10-02T19:08:54.295298144Z" level=info msg="RemoveContainer for \"665d460e16e2e2ada437561b5866df461d98f38c60f28e79987ecb518d131810\" returns successfully" Oct 2 19:08:54.297205 kubelet[2646]: E1002 19:08:54.297181 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:08:54.981480 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d-rootfs.mount: Deactivated successfully. Oct 2 19:08:57.190907 kubelet[2646]: W1002 19:08:57.190871 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice/cri-containerd-a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d.scope WatchSource:0}: task a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d not found: not found Oct 2 19:09:02.450000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:02.453015 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:09:02.453122 kernel: audit: type=1400 audit(1696273742.450:1125): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:02.450000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:02.471520 kernel: audit: type=1400 audit(1696273742.450:1126): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:02.471653 kernel: audit: type=1300 audit(1696273742.450:1125): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c79660 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:02.450000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001c79660 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:02.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:02.505983 kernel: audit: type=1327 audit(1696273742.450:1125): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:02.506132 kernel: audit: type=1300 audit(1696273742.450:1126): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001d39f20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:02.450000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001d39f20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:02.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:02.522025 kernel: audit: type=1327 audit(1696273742.450:1126): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:04.157759 systemd[1]: Started sshd@8-172.31.27.122:22-139.178.89.65:39910.service. Oct 2 19:09:04.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.122:22-139.178.89.65:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.165904 kernel: audit: type=1130 audit(1696273744.157:1127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.122:22-139.178.89.65:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.267000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.277175 kernel: audit: type=1400 audit(1696273744.267:1129): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.277347 kernel: audit: type=1400 audit(1696273744.267:1128): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.267000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.267000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a1b9f80 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:09:04.295410 kernel: audit: type=1300 audit(1696273744.267:1128): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a1b9f80 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:09:04.267000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a063e00 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:09:04.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:09:04.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:09:04.267000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.267000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00bd56c40 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:09:04.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:09:04.282000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.282000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a063e30 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:09:04.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:09:04.304000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.304000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:04.304000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00bd56da0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:09:04.304000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a063f20 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:09:04.304000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:09:04.304000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:09:04.342000 audit[3444]: USER_ACCT pid=3444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:04.343900 sshd[3444]: Accepted publickey for core from 139.178.89.65 port 39910 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:09:04.344000 audit[3444]: CRED_ACQ pid=3444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:04.344000 audit[3444]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe77938e0 a2=3 a3=0 items=0 ppid=1 pid=3444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:04.344000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:04.345848 sshd[3444]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:04.355851 systemd[1]: Started session-9.scope. Oct 2 19:09:04.357754 systemd-logind[1626]: New session 9 of user core. Oct 2 19:09:04.375000 audit[3444]: USER_START pid=3444 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:04.378000 audit[3446]: CRED_ACQ pid=3446 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:04.597300 sshd[3444]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:04.603000 audit[3444]: USER_END pid=3444 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:04.604000 audit[3444]: CRED_DISP pid=3444 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:04.608086 systemd[1]: sshd@8-172.31.27.122:22-139.178.89.65:39910.service: Deactivated successfully. Oct 2 19:09:04.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.122:22-139.178.89.65:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:04.609630 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:09:04.612039 systemd-logind[1626]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:09:04.613703 systemd-logind[1626]: Removed session 9. Oct 2 19:09:05.962394 kubelet[2646]: E1002 19:09:05.962359 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:09:14.645201 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:09:14.645336 kernel: audit: type=1130 audit(1696273754.632:1142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.122:22-139.178.89.65:43498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.122:22-139.178.89.65:43498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:14.633182 systemd[1]: Started sshd@9-172.31.27.122:22-139.178.89.65:43498.service. Oct 2 19:09:14.813000 audit[3459]: USER_ACCT pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:14.820074 sshd[3459]: Accepted publickey for core from 139.178.89.65 port 43498 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:09:14.819000 audit[3459]: CRED_ACQ pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:14.821106 sshd[3459]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:14.826758 kernel: audit: type=1101 audit(1696273754.813:1143): pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:14.826846 kernel: audit: type=1103 audit(1696273754.819:1144): pid=3459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:14.826912 kernel: audit: type=1006 audit(1696273754.819:1145): pid=3459 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:09:14.828659 systemd[1]: Started session-10.scope. Oct 2 19:09:14.819000 audit[3459]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6ec5bb10 a2=3 a3=0 items=0 ppid=1 pid=3459 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:14.830500 systemd-logind[1626]: New session 10 of user core. Oct 2 19:09:14.839619 kernel: audit: type=1300 audit(1696273754.819:1145): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6ec5bb10 a2=3 a3=0 items=0 ppid=1 pid=3459 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:14.839741 kernel: audit: type=1327 audit(1696273754.819:1145): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:14.819000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:14.842000 audit[3459]: USER_START pid=3459 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:14.844000 audit[3461]: CRED_ACQ pid=3461 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:14.851833 kernel: audit: type=1105 audit(1696273754.842:1146): pid=3459 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:14.851887 kernel: audit: type=1103 audit(1696273754.844:1147): pid=3461 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:15.077256 sshd[3459]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:15.078000 audit[3459]: USER_END pid=3459 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:15.080000 audit[3459]: CRED_DISP pid=3459 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:15.088791 systemd[1]: sshd@9-172.31.27.122:22-139.178.89.65:43498.service: Deactivated successfully. Oct 2 19:09:15.089926 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:09:15.091829 systemd-logind[1626]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:09:15.092949 kernel: audit: type=1106 audit(1696273755.078:1148): pid=3459 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:15.093031 kernel: audit: type=1104 audit(1696273755.080:1149): pid=3459 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:15.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.122:22-139.178.89.65:43498 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:15.093526 systemd-logind[1626]: Removed session 10. Oct 2 19:09:19.995000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:19.998898 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:09:19.998971 kernel: audit: type=1400 audit(1696273759.995:1151): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:19.995000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6cc00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:20.020051 kernel: audit: type=1300 audit(1696273759.995:1151): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6cc00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:19.995000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:20.066016 kernel: audit: type=1327 audit(1696273759.995:1151): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:20.066198 kernel: audit: type=1400 audit(1696273760.006:1152): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:20.006000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:20.006000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6cd20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:20.098699 kernel: audit: type=1300 audit(1696273760.006:1152): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6cd20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:20.098876 kernel: audit: type=1327 audit(1696273760.006:1152): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:20.006000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:20.008000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:20.114991 kernel: audit: type=1400 audit(1696273760.008:1153): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:20.115111 kernel: audit: type=1300 audit(1696273760.008:1153): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000dd7680 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:20.008000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000dd7680 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:20.008000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:20.138163 kernel: audit: type=1327 audit(1696273760.008:1153): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:20.138316 kernel: audit: type=1400 audit(1696273760.009:1154): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:20.009000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:09:20.009000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6ce60 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:09:20.009000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:09:20.965743 env[1638]: time="2023-10-02T19:09:20.965681174Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:09:20.982840 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount473900404.mount: Deactivated successfully. Oct 2 19:09:20.993198 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4052622191.mount: Deactivated successfully. Oct 2 19:09:20.998120 env[1638]: time="2023-10-02T19:09:20.998074342Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\"" Oct 2 19:09:20.999630 env[1638]: time="2023-10-02T19:09:20.998640430Z" level=info msg="StartContainer for \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\"" Oct 2 19:09:21.028150 systemd[1]: Started cri-containerd-fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f.scope. Oct 2 19:09:21.042287 systemd[1]: cri-containerd-fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f.scope: Deactivated successfully. Oct 2 19:09:21.071621 env[1638]: time="2023-10-02T19:09:21.071561868Z" level=info msg="shim disconnected" id=fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f Oct 2 19:09:21.071621 env[1638]: time="2023-10-02T19:09:21.071619362Z" level=warning msg="cleaning up after shim disconnected" id=fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f namespace=k8s.io Oct 2 19:09:21.071989 env[1638]: time="2023-10-02T19:09:21.071630695Z" level=info msg="cleaning up dead shim" Oct 2 19:09:21.086146 env[1638]: time="2023-10-02T19:09:21.086092095Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:09:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3493 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:09:21Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:09:21.086450 env[1638]: time="2023-10-02T19:09:21.086385203Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:09:21.086641 env[1638]: time="2023-10-02T19:09:21.086589691Z" level=error msg="Failed to pipe stdout of container \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\"" error="reading from a closed fifo" Oct 2 19:09:21.088094 env[1638]: time="2023-10-02T19:09:21.088042583Z" level=error msg="Failed to pipe stderr of container \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\"" error="reading from a closed fifo" Oct 2 19:09:21.090289 env[1638]: time="2023-10-02T19:09:21.090240893Z" level=error msg="StartContainer for \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:09:21.090517 kubelet[2646]: E1002 19:09:21.090494 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f" Oct 2 19:09:21.091157 kubelet[2646]: E1002 19:09:21.090798 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:09:21.091157 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:09:21.091157 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:09:21.091157 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-twcjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:09:21.091157 kubelet[2646]: E1002 19:09:21.090859 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:09:21.349214 kubelet[2646]: I1002 19:09:21.342707 2646 scope.go:115] "RemoveContainer" containerID="a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d" Oct 2 19:09:21.349214 kubelet[2646]: I1002 19:09:21.343274 2646 scope.go:115] "RemoveContainer" containerID="a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d" Oct 2 19:09:21.351604 env[1638]: time="2023-10-02T19:09:21.351561144Z" level=info msg="RemoveContainer for \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\"" Oct 2 19:09:21.354225 env[1638]: time="2023-10-02T19:09:21.354040214Z" level=info msg="RemoveContainer for \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\"" Oct 2 19:09:21.354354 env[1638]: time="2023-10-02T19:09:21.354300156Z" level=error msg="RemoveContainer for \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\" failed" error="failed to set removing state for container \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\": container is already in removing state" Oct 2 19:09:21.354595 kubelet[2646]: E1002 19:09:21.354571 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\": container is already in removing state" containerID="a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d" Oct 2 19:09:21.354692 kubelet[2646]: E1002 19:09:21.354612 2646 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d": container is already in removing state; Skipping pod "cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)" Oct 2 19:09:21.355202 kubelet[2646]: E1002 19:09:21.354993 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:09:21.358044 env[1638]: time="2023-10-02T19:09:21.357990584Z" level=info msg="RemoveContainer for \"a87b09ab917d0744915a269493ac706e5c472bd7d55b2bebe132b54144306d8d\" returns successfully" Oct 2 19:09:21.982592 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f-rootfs.mount: Deactivated successfully. Oct 2 19:09:24.178028 kubelet[2646]: W1002 19:09:24.177971 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice/cri-containerd-fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f.scope WatchSource:0}: task fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f not found: not found Oct 2 19:09:25.103000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.122:22-139.178.89.65:55836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:25.104945 systemd[1]: Started sshd@10-172.31.27.122:22-139.178.89.65:55836.service. Oct 2 19:09:25.106419 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:09:25.106473 kernel: audit: type=1130 audit(1696273765.103:1155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.122:22-139.178.89.65:55836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:25.271000 audit[3509]: USER_ACCT pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.281148 kernel: audit: type=1101 audit(1696273765.271:1156): pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.281290 sshd[3509]: Accepted publickey for core from 139.178.89.65 port 55836 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:09:25.280000 audit[3509]: CRED_ACQ pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.282457 sshd[3509]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:25.290178 systemd[1]: Started session-11.scope. Oct 2 19:09:25.291825 systemd-logind[1626]: New session 11 of user core. Oct 2 19:09:25.293053 kernel: audit: type=1103 audit(1696273765.280:1157): pid=3509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.293236 kernel: audit: type=1006 audit(1696273765.280:1158): pid=3509 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:09:25.280000 audit[3509]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda5e26650 a2=3 a3=0 items=0 ppid=1 pid=3509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:25.280000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:25.303390 kernel: audit: type=1300 audit(1696273765.280:1158): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda5e26650 a2=3 a3=0 items=0 ppid=1 pid=3509 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:25.303537 kernel: audit: type=1327 audit(1696273765.280:1158): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:25.303581 kernel: audit: type=1105 audit(1696273765.298:1159): pid=3509 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.298000 audit[3509]: USER_START pid=3509 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.300000 audit[3511]: CRED_ACQ pid=3511 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.315632 kernel: audit: type=1103 audit(1696273765.300:1160): pid=3511 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.533999 sshd[3509]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:25.533000 audit[3509]: USER_END pid=3509 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.533000 audit[3509]: CRED_DISP pid=3509 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.543217 systemd[1]: sshd@10-172.31.27.122:22-139.178.89.65:55836.service: Deactivated successfully. Oct 2 19:09:25.544209 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:09:25.546513 systemd-logind[1626]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:09:25.548204 kernel: audit: type=1106 audit(1696273765.533:1161): pid=3509 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.548342 kernel: audit: type=1104 audit(1696273765.533:1162): pid=3509 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:25.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.122:22-139.178.89.65:55836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:25.548030 systemd-logind[1626]: Removed session 11. Oct 2 19:09:31.962976 kubelet[2646]: E1002 19:09:31.962944 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:09:35.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.122:22-139.178.89.65:42474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:35.561932 systemd[1]: Started sshd@11-172.31.27.122:22-139.178.89.65:42474.service. Oct 2 19:09:35.563803 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:09:35.563871 kernel: audit: type=1130 audit(1696273775.561:1164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.122:22-139.178.89.65:42474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:35.732000 audit[3524]: USER_ACCT pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.739237 sshd[3524]: Accepted publickey for core from 139.178.89.65 port 42474 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:09:35.738000 audit[3524]: CRED_ACQ pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.740227 sshd[3524]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:35.745334 kernel: audit: type=1101 audit(1696273775.732:1165): pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.745419 kernel: audit: type=1103 audit(1696273775.738:1166): pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.748994 kernel: audit: type=1006 audit(1696273775.739:1167): pid=3524 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:09:35.749069 kernel: audit: type=1300 audit(1696273775.739:1167): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc31f4760 a2=3 a3=0 items=0 ppid=1 pid=3524 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:35.739000 audit[3524]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc31f4760 a2=3 a3=0 items=0 ppid=1 pid=3524 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:35.752990 systemd[1]: Started session-12.scope. Oct 2 19:09:35.755109 systemd-logind[1626]: New session 12 of user core. Oct 2 19:09:35.739000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:35.757917 kernel: audit: type=1327 audit(1696273775.739:1167): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:35.763000 audit[3524]: USER_START pid=3524 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.765000 audit[3526]: CRED_ACQ pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.776739 kernel: audit: type=1105 audit(1696273775.763:1168): pid=3524 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.776882 kernel: audit: type=1103 audit(1696273775.765:1169): pid=3526 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.983414 sshd[3524]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:35.983000 audit[3524]: USER_END pid=3524 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.984000 audit[3524]: CRED_DISP pid=3524 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.992502 systemd[1]: sshd@11-172.31.27.122:22-139.178.89.65:42474.service: Deactivated successfully. Oct 2 19:09:35.993550 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:09:35.995889 systemd-logind[1626]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:09:35.997241 kernel: audit: type=1106 audit(1696273775.983:1170): pid=3524 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.997312 kernel: audit: type=1104 audit(1696273775.984:1171): pid=3524 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:35.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.122:22-139.178.89.65:42474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:35.997487 systemd-logind[1626]: Removed session 12. Oct 2 19:09:46.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.122:22-139.178.89.65:58158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:46.010088 systemd[1]: Started sshd@12-172.31.27.122:22-139.178.89.65:58158.service. Oct 2 19:09:46.013791 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:09:46.013885 kernel: audit: type=1130 audit(1696273786.009:1173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.122:22-139.178.89.65:58158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:46.187000 audit[3537]: USER_ACCT pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.188371 sshd[3537]: Accepted publickey for core from 139.178.89.65 port 58158 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:09:46.205193 kernel: audit: type=1101 audit(1696273786.187:1174): pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.205325 kernel: audit: type=1103 audit(1696273786.202:1175): pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.202000 audit[3537]: CRED_ACQ pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.204353 sshd[3537]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:46.218934 systemd[1]: Started session-13.scope. Oct 2 19:09:46.221051 kernel: audit: type=1006 audit(1696273786.202:1176): pid=3537 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:09:46.220136 systemd-logind[1626]: New session 13 of user core. Oct 2 19:09:46.229981 kernel: audit: type=1300 audit(1696273786.202:1176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc66377aa0 a2=3 a3=0 items=0 ppid=1 pid=3537 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:46.202000 audit[3537]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc66377aa0 a2=3 a3=0 items=0 ppid=1 pid=3537 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:46.202000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:46.229000 audit[3537]: USER_START pid=3537 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.239897 kernel: audit: type=1327 audit(1696273786.202:1176): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:46.240059 kernel: audit: type=1105 audit(1696273786.229:1177): pid=3537 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.240930 kernel: audit: type=1103 audit(1696273786.232:1178): pid=3539 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.232000 audit[3539]: CRED_ACQ pid=3539 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.429941 sshd[3537]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:46.430000 audit[3537]: USER_END pid=3537 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.434232 systemd[1]: sshd@12-172.31.27.122:22-139.178.89.65:58158.service: Deactivated successfully. Oct 2 19:09:46.435189 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:09:46.437785 systemd-logind[1626]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:09:46.440142 systemd-logind[1626]: Removed session 13. Oct 2 19:09:46.430000 audit[3537]: CRED_DISP pid=3537 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.450036 kernel: audit: type=1106 audit(1696273786.430:1179): pid=3537 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.450156 kernel: audit: type=1104 audit(1696273786.430:1180): pid=3537 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:46.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.122:22-139.178.89.65:58158 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:46.963025 kubelet[2646]: E1002 19:09:46.962993 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:09:47.742466 update_engine[1628]: I1002 19:09:47.742412 1628 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:09:47.742905 update_engine[1628]: I1002 19:09:47.742477 1628 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:09:47.745543 update_engine[1628]: I1002 19:09:47.745510 1628 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:09:47.745982 update_engine[1628]: I1002 19:09:47.745959 1628 omaha_request_params.cc:62] Current group set to lts Oct 2 19:09:47.748690 update_engine[1628]: I1002 19:09:47.748461 1628 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:09:47.748690 update_engine[1628]: I1002 19:09:47.748476 1628 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:09:47.748690 update_engine[1628]: I1002 19:09:47.748499 1628 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:09:47.748690 update_engine[1628]: I1002 19:09:47.748540 1628 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:09:47.748690 update_engine[1628]: I1002 19:09:47.748625 1628 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:09:47.748690 update_engine[1628]: I1002 19:09:47.748632 1628 omaha_request_action.cc:269] Request: <?xml version="1.0" encoding="UTF-8"?> Oct 2 19:09:47.748690 update_engine[1628]: <request protocol="3.0" version="update_engine-0.4.10" updaterversion="update_engine-0.4.10" installsource="scheduler" ismachine="1"> Oct 2 19:09:47.748690 update_engine[1628]: <os version="Chateau" platform="CoreOS" sp="3510.3.0_x86_64"></os> Oct 2 19:09:47.748690 update_engine[1628]: <app appid="{e96281a6-d1af-4bde-9a0a-97b76e56dc57}" version="3510.3.0" track="lts" bootid="{9a7e3984-0941-4d5b-96ef-8ca5c185b0a2}" oem="ami" oemversion="0.1.2-r2" alephversion="3510.3.0" machineid="ec2c1669a95714c6c93a42ae8ab24ba1" machinealias="" lang="en-US" board="amd64-usr" hardware_class="" delta_okay="false" > Oct 2 19:09:47.748690 update_engine[1628]: <ping active="1"></ping> Oct 2 19:09:47.748690 update_engine[1628]: <updatecheck></updatecheck> Oct 2 19:09:47.748690 update_engine[1628]: <event eventtype="3" eventresult="2" previousversion="0.0.0.0"></event> Oct 2 19:09:47.748690 update_engine[1628]: </app> Oct 2 19:09:47.748690 update_engine[1628]: </request> Oct 2 19:09:47.748690 update_engine[1628]: I1002 19:09:47.748638 1628 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:09:47.758585 update_engine[1628]: I1002 19:09:47.758548 1628 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:09:47.758810 update_engine[1628]: I1002 19:09:47.758790 1628 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:09:47.773262 locksmithd[1692]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:09:48.928353 update_engine[1628]: I1002 19:09:48.928324 1628 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:09:48.928748 update_engine[1628]: I1002 19:09:48.928584 1628 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:09:48.928824 update_engine[1628]: I1002 19:09:48.928752 1628 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:09:49.251425 update_engine[1628]: I1002 19:09:49.251019 1628 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:09:49.254631 update_engine[1628]: I1002 19:09:49.254592 1628 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:09:49.254631 update_engine[1628]: I1002 19:09:49.254621 1628 omaha_request_action.cc:619] Omaha request response: <?xml version="1.0" encoding="UTF-8"?> Oct 2 19:09:49.254631 update_engine[1628]: <response protocol="3.0" server="nebraska"><daystart elapsed_seconds="0"></daystart><app appid="{e96281a6-d1af-4bde-9a0a-97b76e56dc57}" status="ok"><ping status="ok"></ping><updatecheck status="noupdate"><urls></urls></updatecheck><event status="ok"></event></app></response> Oct 2 19:09:49.265748 update_engine[1628]: I1002 19:09:49.265707 1628 omaha_request_action.cc:409] No update. Oct 2 19:09:49.265748 update_engine[1628]: I1002 19:09:49.265748 1628 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:09:49.265748 update_engine[1628]: I1002 19:09:49.265753 1628 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:09:49.265968 update_engine[1628]: I1002 19:09:49.265758 1628 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:09:49.265968 update_engine[1628]: I1002 19:09:49.265780 1628 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:09:49.265968 update_engine[1628]: I1002 19:09:49.265784 1628 update_attempter.cc:302] Processing Done. Oct 2 19:09:49.265968 update_engine[1628]: I1002 19:09:49.265801 1628 update_attempter.cc:338] No update. Oct 2 19:09:49.265968 update_engine[1628]: I1002 19:09:49.265815 1628 update_check_scheduler.cc:74] Next update check in 46m5s Oct 2 19:09:49.267027 locksmithd[1692]: LastCheckedTime=1696273789 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:09:56.470924 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:09:56.471103 kernel: audit: type=1130 audit(1696273796.460:1182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.122:22-139.178.89.65:37542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:56.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.122:22-139.178.89.65:37542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:56.460544 systemd[1]: Started sshd@13-172.31.27.122:22-139.178.89.65:37542.service. Oct 2 19:09:56.629000 audit[3552]: USER_ACCT pid=3552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.637055 sshd[3552]: Accepted publickey for core from 139.178.89.65 port 37542 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:09:56.636000 audit[3552]: CRED_ACQ pid=3552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.638577 sshd[3552]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:09:56.649473 kernel: audit: type=1101 audit(1696273796.629:1183): pid=3552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.650036 kernel: audit: type=1103 audit(1696273796.636:1184): pid=3552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.650117 kernel: audit: type=1006 audit(1696273796.636:1185): pid=3552 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:09:56.650152 kernel: audit: type=1300 audit(1696273796.636:1185): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2c78a470 a2=3 a3=0 items=0 ppid=1 pid=3552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:56.636000 audit[3552]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2c78a470 a2=3 a3=0 items=0 ppid=1 pid=3552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:09:56.636000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:56.662973 kernel: audit: type=1327 audit(1696273796.636:1185): proctitle=737368643A20636F7265205B707269765D Oct 2 19:09:56.661397 systemd[1]: Started session-14.scope. Oct 2 19:09:56.662109 systemd-logind[1626]: New session 14 of user core. Oct 2 19:09:56.672000 audit[3552]: USER_START pid=3552 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.675000 audit[3554]: CRED_ACQ pid=3554 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.687741 kernel: audit: type=1105 audit(1696273796.672:1186): pid=3552 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.687947 kernel: audit: type=1103 audit(1696273796.675:1187): pid=3554 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.881930 sshd[3552]: pam_unix(sshd:session): session closed for user core Oct 2 19:09:56.884000 audit[3552]: USER_END pid=3552 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.887608 systemd-logind[1626]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:09:56.889589 systemd[1]: sshd@13-172.31.27.122:22-139.178.89.65:37542.service: Deactivated successfully. Oct 2 19:09:56.890520 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:09:56.892435 systemd-logind[1626]: Removed session 14. Oct 2 19:09:56.893127 kernel: audit: type=1106 audit(1696273796.884:1188): pid=3552 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.893206 kernel: audit: type=1104 audit(1696273796.884:1189): pid=3552 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.884000 audit[3552]: CRED_DISP pid=3552 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:09:56.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.122:22-139.178.89.65:37542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:09:58.962693 kubelet[2646]: E1002 19:09:58.962652 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:10:02.455948 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:10:02.456122 kernel: audit: type=1400 audit(1696273802.451:1192): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:02.451000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:02.451000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:02.479279 kernel: audit: type=1400 audit(1696273802.451:1191): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:02.451000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000be9940 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:02.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:02.520169 kernel: audit: type=1300 audit(1696273802.451:1191): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000be9940 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:02.520420 kernel: audit: type=1327 audit(1696273802.451:1191): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:02.520464 kernel: audit: type=1300 audit(1696273802.451:1192): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ba5c20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:02.451000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ba5c20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:02.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:02.547562 kernel: audit: type=1327 audit(1696273802.451:1192): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:04.277000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.295301 kernel: audit: type=1400 audit(1696273804.277:1193): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.277000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00d7b96e0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:10:04.277000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:10:04.321908 kernel: audit: type=1300 audit(1696273804.277:1193): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00d7b96e0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:10:04.322018 kernel: audit: type=1327 audit(1696273804.277:1193): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:10:04.322070 kernel: audit: type=1400 audit(1696273804.278:1194): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.278000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.278000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00a91dc20 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:10:04.278000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:10:04.279000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.279000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0039c93b0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:10:04.279000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:10:04.287000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.287000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0039c94d0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:10:04.287000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:10:04.305000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.305000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00d7b98c0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:10:04.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:10:04.305000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:04.305000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0039c95f0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:10:04.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:10:06.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.122:22-139.178.89.65:38386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:06.916711 systemd[1]: Started sshd@14-172.31.27.122:22-139.178.89.65:38386.service. Oct 2 19:10:07.104000 audit[3565]: USER_ACCT pid=3565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:07.105278 sshd[3565]: Accepted publickey for core from 139.178.89.65 port 38386 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:10:07.108000 audit[3565]: CRED_ACQ pid=3565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:07.108000 audit[3565]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd99aae250 a2=3 a3=0 items=0 ppid=1 pid=3565 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:07.108000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:07.111240 sshd[3565]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:07.129045 systemd[1]: Started session-15.scope. Oct 2 19:10:07.129586 systemd-logind[1626]: New session 15 of user core. Oct 2 19:10:07.162000 audit[3565]: USER_START pid=3565 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:07.164000 audit[3567]: CRED_ACQ pid=3567 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:07.356540 sshd[3565]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:07.358000 audit[3565]: USER_END pid=3565 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:07.358000 audit[3565]: CRED_DISP pid=3565 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:07.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.122:22-139.178.89.65:38386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:07.362326 systemd[1]: sshd@14-172.31.27.122:22-139.178.89.65:38386.service: Deactivated successfully. Oct 2 19:10:07.363531 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:10:07.366630 systemd-logind[1626]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:10:07.369346 systemd-logind[1626]: Removed session 15. Oct 2 19:10:07.876840 kubelet[2646]: E1002 19:10:07.876792 2646 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:10:08.005414 kubelet[2646]: E1002 19:10:08.005388 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:12.967061 env[1638]: time="2023-10-02T19:10:12.965139691Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:10:12.994413 env[1638]: time="2023-10-02T19:10:12.994361106Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\"" Oct 2 19:10:12.995383 env[1638]: time="2023-10-02T19:10:12.995349224Z" level=info msg="StartContainer for \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\"" Oct 2 19:10:13.010306 kubelet[2646]: E1002 19:10:13.010269 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:13.036467 systemd[1]: Started cri-containerd-c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944.scope. Oct 2 19:10:13.060954 systemd[1]: cri-containerd-c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944.scope: Deactivated successfully. Oct 2 19:10:13.085468 env[1638]: time="2023-10-02T19:10:13.085410017Z" level=info msg="shim disconnected" id=c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944 Oct 2 19:10:13.085468 env[1638]: time="2023-10-02T19:10:13.085467806Z" level=warning msg="cleaning up after shim disconnected" id=c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944 namespace=k8s.io Oct 2 19:10:13.086186 env[1638]: time="2023-10-02T19:10:13.085480007Z" level=info msg="cleaning up dead shim" Oct 2 19:10:13.099251 env[1638]: time="2023-10-02T19:10:13.099192595Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:10:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3604 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:10:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:10:13.099546 env[1638]: time="2023-10-02T19:10:13.099481869Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:10:13.101030 env[1638]: time="2023-10-02T19:10:13.100970346Z" level=error msg="Failed to pipe stdout of container \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\"" error="reading from a closed fifo" Oct 2 19:10:13.107316 env[1638]: time="2023-10-02T19:10:13.107188803Z" level=error msg="Failed to pipe stderr of container \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\"" error="reading from a closed fifo" Oct 2 19:10:13.109514 env[1638]: time="2023-10-02T19:10:13.109434523Z" level=error msg="StartContainer for \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:10:13.110094 kubelet[2646]: E1002 19:10:13.110069 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944" Oct 2 19:10:13.110287 kubelet[2646]: E1002 19:10:13.110229 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:10:13.110287 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:10:13.110287 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:10:13.110287 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-twcjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:10:13.111061 kubelet[2646]: E1002 19:10:13.110288 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:10:13.484286 kubelet[2646]: I1002 19:10:13.484193 2646 scope.go:115] "RemoveContainer" containerID="fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f" Oct 2 19:10:13.484808 kubelet[2646]: I1002 19:10:13.484734 2646 scope.go:115] "RemoveContainer" containerID="fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f" Oct 2 19:10:13.486518 env[1638]: time="2023-10-02T19:10:13.486482507Z" level=info msg="RemoveContainer for \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\"" Oct 2 19:10:13.488158 env[1638]: time="2023-10-02T19:10:13.488127685Z" level=info msg="RemoveContainer for \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\"" Oct 2 19:10:13.488439 env[1638]: time="2023-10-02T19:10:13.488401811Z" level=error msg="RemoveContainer for \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\" failed" error="failed to set removing state for container \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\": container is already in removing state" Oct 2 19:10:13.490127 kubelet[2646]: E1002 19:10:13.488665 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\": container is already in removing state" containerID="fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f" Oct 2 19:10:13.490127 kubelet[2646]: E1002 19:10:13.488703 2646 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f": container is already in removing state; Skipping pod "cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)" Oct 2 19:10:13.490127 kubelet[2646]: E1002 19:10:13.489228 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:10:13.534131 env[1638]: time="2023-10-02T19:10:13.534071089Z" level=info msg="RemoveContainer for \"fe878b9f1b2ac5e31ecf2096ec6b886aff47494c8f884e159ef804da47df2e6f\" returns successfully" Oct 2 19:10:13.979871 systemd[1]: run-containerd-runc-k8s.io-c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944-runc.DFw4Ik.mount: Deactivated successfully. Oct 2 19:10:13.980013 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944-rootfs.mount: Deactivated successfully. Oct 2 19:10:16.192229 kubelet[2646]: W1002 19:10:16.191856 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice/cri-containerd-c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944.scope WatchSource:0}: task c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944 not found: not found Oct 2 19:10:17.387317 systemd[1]: Started sshd@15-172.31.27.122:22-139.178.89.65:39730.service. Oct 2 19:10:17.391397 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:10:17.392584 kernel: audit: type=1130 audit(1696273817.387:1208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.122:22-139.178.89.65:39730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:17.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.122:22-139.178.89.65:39730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:17.577000 audit[3618]: USER_ACCT pid=3618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.578615 sshd[3618]: Accepted publickey for core from 139.178.89.65 port 39730 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:10:17.586893 kernel: audit: type=1101 audit(1696273817.577:1209): pid=3618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.587000 audit[3618]: CRED_ACQ pid=3618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.588897 sshd[3618]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:17.604339 kernel: audit: type=1103 audit(1696273817.587:1210): pid=3618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.604588 kernel: audit: type=1006 audit(1696273817.587:1211): pid=3618 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:10:17.604630 kernel: audit: type=1300 audit(1696273817.587:1211): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb99f03b0 a2=3 a3=0 items=0 ppid=1 pid=3618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:17.587000 audit[3618]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb99f03b0 a2=3 a3=0 items=0 ppid=1 pid=3618 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:17.603314 systemd[1]: Started session-16.scope. Oct 2 19:10:17.606717 systemd-logind[1626]: New session 16 of user core. Oct 2 19:10:17.587000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:17.613664 kernel: audit: type=1327 audit(1696273817.587:1211): proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:17.618131 kernel: audit: type=1105 audit(1696273817.613:1212): pid=3618 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.613000 audit[3618]: USER_START pid=3618 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.613000 audit[3620]: CRED_ACQ pid=3620 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.628085 kernel: audit: type=1103 audit(1696273817.613:1213): pid=3620 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.848500 sshd[3618]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:17.849000 audit[3618]: USER_END pid=3618 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.864845 kernel: audit: type=1106 audit(1696273817.849:1214): pid=3618 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.864967 kernel: audit: type=1104 audit(1696273817.849:1215): pid=3618 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.849000 audit[3618]: CRED_DISP pid=3618 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:17.859690 systemd-logind[1626]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:10:17.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.122:22-139.178.89.65:39730 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:17.861632 systemd[1]: sshd@15-172.31.27.122:22-139.178.89.65:39730.service: Deactivated successfully. Oct 2 19:10:17.862545 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:10:17.864471 systemd-logind[1626]: Removed session 16. Oct 2 19:10:18.011381 kubelet[2646]: E1002 19:10:18.011347 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:19.997000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:19.997000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fb73a0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:19.997000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:20.009000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:20.009000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:20.009000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001fb73c0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:20.009000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:20.009000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218c440 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:20.009000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:20.013000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:10:20.013000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218c560 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:10:20.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:10:23.012707 kubelet[2646]: E1002 19:10:23.012675 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:27.876392 systemd[1]: Started sshd@16-172.31.27.122:22-139.178.89.65:35370.service. Oct 2 19:10:27.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.122:22-139.178.89.65:35370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:27.879048 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:10:27.881002 kernel: audit: type=1130 audit(1696273827.876:1221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.122:22-139.178.89.65:35370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:27.965453 kubelet[2646]: E1002 19:10:27.964495 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:10:28.014029 kubelet[2646]: E1002 19:10:28.014003 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:28.079000 audit[3633]: USER_ACCT pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.086606 sshd[3633]: Accepted publickey for core from 139.178.89.65 port 35370 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:10:28.086973 kernel: audit: type=1101 audit(1696273828.079:1222): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.087010 sshd[3633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:28.085000 audit[3633]: CRED_ACQ pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.099043 kernel: audit: type=1103 audit(1696273828.085:1223): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.099248 kernel: audit: type=1006 audit(1696273828.085:1224): pid=3633 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:10:28.098509 systemd[1]: Started session-17.scope. Oct 2 19:10:28.085000 audit[3633]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd64917550 a2=3 a3=0 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:28.102118 systemd-logind[1626]: New session 17 of user core. Oct 2 19:10:28.111741 kernel: audit: type=1300 audit(1696273828.085:1224): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd64917550 a2=3 a3=0 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:28.111881 kernel: audit: type=1327 audit(1696273828.085:1224): proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:28.085000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:28.110000 audit[3633]: USER_START pid=3633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.114000 audit[3635]: CRED_ACQ pid=3635 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.128189 kernel: audit: type=1105 audit(1696273828.110:1225): pid=3633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.128309 kernel: audit: type=1103 audit(1696273828.114:1226): pid=3635 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.345107 sshd[3633]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:28.346000 audit[3633]: USER_END pid=3633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.347000 audit[3633]: CRED_DISP pid=3633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.358014 systemd[1]: sshd@16-172.31.27.122:22-139.178.89.65:35370.service: Deactivated successfully. Oct 2 19:10:28.359181 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:10:28.361592 systemd-logind[1626]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:10:28.363056 kernel: audit: type=1106 audit(1696273828.346:1227): pid=3633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.363119 kernel: audit: type=1104 audit(1696273828.347:1228): pid=3633 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.357000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.122:22-139.178.89.65:35370 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:28.363881 systemd-logind[1626]: Removed session 17. Oct 2 19:10:28.374415 systemd[1]: Started sshd@17-172.31.27.122:22-139.178.89.65:35376.service. Oct 2 19:10:28.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.122:22-139.178.89.65:35376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:28.543000 audit[3646]: USER_ACCT pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.544872 sshd[3646]: Accepted publickey for core from 139.178.89.65 port 35376 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:10:28.545000 audit[3646]: CRED_ACQ pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.545000 audit[3646]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec6df5fa0 a2=3 a3=0 items=0 ppid=1 pid=3646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:28.545000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:28.546633 sshd[3646]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:28.553005 systemd-logind[1626]: New session 18 of user core. Oct 2 19:10:28.553384 systemd[1]: Started session-18.scope. Oct 2 19:10:28.559000 audit[3646]: USER_START pid=3646 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:28.561000 audit[3648]: CRED_ACQ pid=3648 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:29.642993 sshd[3646]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:29.647000 audit[3646]: USER_END pid=3646 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:29.647000 audit[3646]: CRED_DISP pid=3646 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:29.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.122:22-139.178.89.65:35376 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:29.654591 systemd[1]: sshd@17-172.31.27.122:22-139.178.89.65:35376.service: Deactivated successfully. Oct 2 19:10:29.655625 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:10:29.657747 systemd-logind[1626]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:10:29.659310 systemd-logind[1626]: Removed session 18. Oct 2 19:10:29.670409 systemd[1]: Started sshd@18-172.31.27.122:22-139.178.89.65:35386.service. Oct 2 19:10:29.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.122:22-139.178.89.65:35386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:29.857000 audit[3656]: USER_ACCT pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:29.858862 sshd[3656]: Accepted publickey for core from 139.178.89.65 port 35386 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:10:29.859000 audit[3656]: CRED_ACQ pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:29.859000 audit[3656]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2a00c3d0 a2=3 a3=0 items=0 ppid=1 pid=3656 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:29.859000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:29.860998 sshd[3656]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:29.866379 systemd[1]: Started session-19.scope. Oct 2 19:10:29.867298 systemd-logind[1626]: New session 19 of user core. Oct 2 19:10:29.873000 audit[3656]: USER_START pid=3656 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:29.874000 audit[3658]: CRED_ACQ pid=3658 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:30.085931 sshd[3656]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:30.087000 audit[3656]: USER_END pid=3656 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:30.087000 audit[3656]: CRED_DISP pid=3656 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:30.090435 systemd[1]: sshd@18-172.31.27.122:22-139.178.89.65:35386.service: Deactivated successfully. Oct 2 19:10:30.091380 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:10:30.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.122:22-139.178.89.65:35386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:30.092240 systemd-logind[1626]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:10:30.093372 systemd-logind[1626]: Removed session 19. Oct 2 19:10:33.015689 kubelet[2646]: E1002 19:10:33.015627 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:38.017274 kubelet[2646]: E1002 19:10:38.017235 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:39.962923 kubelet[2646]: E1002 19:10:39.962888 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:10:40.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.122:22-139.178.89.65:48090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:40.116723 systemd[1]: Started sshd@19-172.31.27.122:22-139.178.89.65:48090.service. Oct 2 19:10:40.132735 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:10:40.132888 kernel: audit: type=1130 audit(1696273840.116:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.122:22-139.178.89.65:48090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:40.304000 audit[3669]: USER_ACCT pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.307410 sshd[3669]: Accepted publickey for core from 139.178.89.65 port 48090 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:10:40.317639 kernel: audit: type=1101 audit(1696273840.304:1249): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.317000 audit[3669]: CRED_ACQ pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.318611 sshd[3669]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:40.329651 kernel: audit: type=1103 audit(1696273840.317:1250): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.329773 kernel: audit: type=1006 audit(1696273840.317:1251): pid=3669 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:10:40.329811 kernel: audit: type=1300 audit(1696273840.317:1251): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4ce89ce0 a2=3 a3=0 items=0 ppid=1 pid=3669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:40.317000 audit[3669]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4ce89ce0 a2=3 a3=0 items=0 ppid=1 pid=3669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:40.328881 systemd[1]: Started session-20.scope. Oct 2 19:10:40.331574 systemd-logind[1626]: New session 20 of user core. Oct 2 19:10:40.317000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:40.338803 kernel: audit: type=1327 audit(1696273840.317:1251): proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:40.338000 audit[3669]: USER_START pid=3669 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.343000 audit[3671]: CRED_ACQ pid=3671 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.352429 kernel: audit: type=1105 audit(1696273840.338:1252): pid=3669 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.352517 kernel: audit: type=1103 audit(1696273840.343:1253): pid=3671 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.542400 sshd[3669]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:40.543000 audit[3669]: USER_END pid=3669 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.546425 systemd[1]: sshd@19-172.31.27.122:22-139.178.89.65:48090.service: Deactivated successfully. Oct 2 19:10:40.547439 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:10:40.549539 systemd-logind[1626]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:10:40.550883 systemd-logind[1626]: Removed session 20. Oct 2 19:10:40.543000 audit[3669]: CRED_DISP pid=3669 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.557811 kernel: audit: type=1106 audit(1696273840.543:1254): pid=3669 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.557949 kernel: audit: type=1104 audit(1696273840.543:1255): pid=3669 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:40.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.122:22-139.178.89.65:48090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:43.018951 kubelet[2646]: E1002 19:10:43.018920 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:48.021134 kubelet[2646]: E1002 19:10:48.021093 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:50.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.122:22-139.178.89.65:38254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:50.571057 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:10:50.571112 kernel: audit: type=1130 audit(1696273850.568:1257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.122:22-139.178.89.65:38254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:50.569054 systemd[1]: Started sshd@20-172.31.27.122:22-139.178.89.65:38254.service. Oct 2 19:10:50.736000 audit[3681]: USER_ACCT pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.749148 sshd[3681]: Accepted publickey for core from 139.178.89.65 port 38254 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:10:50.752076 kernel: audit: type=1101 audit(1696273850.736:1258): pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.748000 audit[3681]: CRED_ACQ pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.752907 sshd[3681]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:10:50.761896 systemd[1]: Started session-21.scope. Oct 2 19:10:50.763925 kernel: audit: type=1103 audit(1696273850.748:1259): pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.763994 kernel: audit: type=1006 audit(1696273850.751:1260): pid=3681 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:10:50.764043 kernel: audit: type=1300 audit(1696273850.751:1260): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceb84bfa0 a2=3 a3=0 items=0 ppid=1 pid=3681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:50.751000 audit[3681]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffceb84bfa0 a2=3 a3=0 items=0 ppid=1 pid=3681 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:10:50.765015 systemd-logind[1626]: New session 21 of user core. Oct 2 19:10:50.772873 kernel: audit: type=1327 audit(1696273850.751:1260): proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:50.751000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:10:50.771000 audit[3681]: USER_START pid=3681 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.782285 kernel: audit: type=1105 audit(1696273850.771:1261): pid=3681 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.774000 audit[3683]: CRED_ACQ pid=3683 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.782786 kernel: audit: type=1103 audit(1696273850.774:1262): pid=3683 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.962884 kubelet[2646]: E1002 19:10:50.962844 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:10:50.981844 sshd[3681]: pam_unix(sshd:session): session closed for user core Oct 2 19:10:50.983000 audit[3681]: USER_END pid=3681 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.992153 kernel: audit: type=1106 audit(1696273850.983:1263): pid=3681 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.983000 audit[3681]: CRED_DISP pid=3681 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:50.993685 systemd-logind[1626]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:10:50.995741 systemd[1]: sshd@20-172.31.27.122:22-139.178.89.65:38254.service: Deactivated successfully. Oct 2 19:10:50.996962 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:10:50.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.122:22-139.178.89.65:38254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:10:50.998847 systemd-logind[1626]: Removed session 21. Oct 2 19:10:50.999824 kernel: audit: type=1104 audit(1696273850.983:1264): pid=3681 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:10:53.022330 kubelet[2646]: E1002 19:10:53.022298 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:10:58.023139 kubelet[2646]: E1002 19:10:58.023104 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:01.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.122:22-139.178.89.65:49186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:01.009662 systemd[1]: Started sshd@21-172.31.27.122:22-139.178.89.65:49186.service. Oct 2 19:11:01.011451 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:11:01.011528 kernel: audit: type=1130 audit(1696273861.009:1266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.122:22-139.178.89.65:49186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:01.204103 kernel: audit: type=1101 audit(1696273861.186:1267): pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.186000 audit[3697]: USER_ACCT pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.204366 sshd[3697]: Accepted publickey for core from 139.178.89.65 port 49186 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:11:01.202000 audit[3697]: CRED_ACQ pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.206209 sshd[3697]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:01.216914 kernel: audit: type=1103 audit(1696273861.202:1268): pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.219205 systemd[1]: Started session-22.scope. Oct 2 19:11:01.221938 systemd-logind[1626]: New session 22 of user core. Oct 2 19:11:01.223953 kernel: audit: type=1006 audit(1696273861.203:1269): pid=3697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:11:01.203000 audit[3697]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce3f2ac80 a2=3 a3=0 items=0 ppid=1 pid=3697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:01.203000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:01.240433 kernel: audit: type=1300 audit(1696273861.203:1269): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce3f2ac80 a2=3 a3=0 items=0 ppid=1 pid=3697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:01.240544 kernel: audit: type=1327 audit(1696273861.203:1269): proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:01.240574 kernel: audit: type=1105 audit(1696273861.235:1270): pid=3697 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.235000 audit[3697]: USER_START pid=3697 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.252017 kernel: audit: type=1103 audit(1696273861.237:1271): pid=3699 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.237000 audit[3699]: CRED_ACQ pid=3699 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.465525 sshd[3697]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:01.468000 audit[3697]: USER_END pid=3697 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.470000 audit[3697]: CRED_DISP pid=3697 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.482251 systemd[1]: sshd@21-172.31.27.122:22-139.178.89.65:49186.service: Deactivated successfully. Oct 2 19:11:01.490574 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:11:01.496238 systemd-logind[1626]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:11:01.512320 kernel: audit: type=1106 audit(1696273861.468:1272): pid=3697 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.512434 kernel: audit: type=1104 audit(1696273861.470:1273): pid=3697 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:01.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.122:22-139.178.89.65:49186 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:01.513329 systemd-logind[1626]: Removed session 22. Oct 2 19:11:02.452000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:02.452000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00288f4e0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:02.452000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:02.455000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:02.455000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002258ed0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:02.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:02.962511 kubelet[2646]: E1002 19:11:02.962466 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:11:03.024872 kubelet[2646]: E1002 19:11:03.024841 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:04.278000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:04.278000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00cff70e0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:11:04.278000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:11:04.279000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:04.279000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c01085cae0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:11:04.279000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:11:04.279000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:04.279000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c010721620 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:11:04.279000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:11:04.288000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:04.288000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c01085cb40 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:11:04.288000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:11:04.305000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:04.305000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:04.305000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00d015280 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:11:04.305000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c010721800 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:11:04.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:11:04.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:11:08.026100 kubelet[2646]: E1002 19:11:08.026048 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:11.501868 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:11:11.502000 kernel: audit: type=1130 audit(1696273871.492:1283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.122:22-139.178.89.65:49550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:11.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.122:22-139.178.89.65:49550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:11.493537 systemd[1]: Started sshd@22-172.31.27.122:22-139.178.89.65:49550.service. Oct 2 19:11:11.678000 audit[3711]: USER_ACCT pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.680892 sshd[3711]: Accepted publickey for core from 139.178.89.65 port 49550 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:11:11.689808 kernel: audit: type=1101 audit(1696273871.678:1284): pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.686000 audit[3711]: CRED_ACQ pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.690631 sshd[3711]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:11.699652 systemd[1]: Started session-23.scope. Oct 2 19:11:11.700701 kernel: audit: type=1103 audit(1696273871.686:1285): pid=3711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.700804 kernel: audit: type=1006 audit(1696273871.688:1286): pid=3711 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:11:11.688000 audit[3711]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb073f2f0 a2=3 a3=0 items=0 ppid=1 pid=3711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.702199 systemd-logind[1626]: New session 23 of user core. Oct 2 19:11:11.709006 kernel: audit: type=1300 audit(1696273871.688:1286): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb073f2f0 a2=3 a3=0 items=0 ppid=1 pid=3711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:11.688000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:11.708000 audit[3711]: USER_START pid=3711 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.726484 kernel: audit: type=1327 audit(1696273871.688:1286): proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:11.726600 kernel: audit: type=1105 audit(1696273871.708:1287): pid=3711 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.726637 kernel: audit: type=1103 audit(1696273871.715:1288): pid=3713 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.715000 audit[3713]: CRED_ACQ pid=3713 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.918564 sshd[3711]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:11.918000 audit[3711]: USER_END pid=3711 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.923165 systemd-logind[1626]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:11:11.925256 systemd[1]: sshd@22-172.31.27.122:22-139.178.89.65:49550.service: Deactivated successfully. Oct 2 19:11:11.926290 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:11:11.918000 audit[3711]: CRED_DISP pid=3711 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.928668 systemd-logind[1626]: Removed session 23. Oct 2 19:11:11.933590 kernel: audit: type=1106 audit(1696273871.918:1289): pid=3711 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.933673 kernel: audit: type=1104 audit(1696273871.918:1290): pid=3711 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:11.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.122:22-139.178.89.65:49550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:13.027740 kubelet[2646]: E1002 19:11:13.027705 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:15.962392 kubelet[2646]: E1002 19:11:15.962358 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:11:18.029705 kubelet[2646]: E1002 19:11:18.029642 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:19.997000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:20.000181 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:11:20.001545 kernel: audit: type=1400 audit(1696273879.997:1292): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:19.997000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bf0ea0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:19.997000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:20.029705 kernel: audit: type=1300 audit(1696273879.997:1292): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bf0ea0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:20.029836 kernel: audit: type=1327 audit(1696273879.997:1292): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:20.029873 kernel: audit: type=1400 audit(1696273880.011:1293): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:20.011000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:20.011000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bf0ec0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:20.042269 kernel: audit: type=1300 audit(1696273880.011:1293): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bf0ec0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:20.042377 kernel: audit: type=1327 audit(1696273880.011:1293): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:20.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:20.011000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:20.057102 kernel: audit: type=1400 audit(1696273880.011:1294): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:20.057221 kernel: audit: type=1300 audit(1696273880.011:1294): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025406e0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:20.011000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025406e0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:20.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:20.072430 kernel: audit: type=1327 audit(1696273880.011:1294): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:20.072540 kernel: audit: type=1400 audit(1696273880.011:1295): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:20.011000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:11:20.011000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bf0ee0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:11:20.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:11:21.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.122:22-139.178.89.65:53000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:21.947146 systemd[1]: Started sshd@23-172.31.27.122:22-139.178.89.65:53000.service. Oct 2 19:11:22.126000 audit[3724]: USER_ACCT pid=3724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:22.128117 sshd[3724]: Accepted publickey for core from 139.178.89.65 port 53000 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:11:22.127000 audit[3724]: CRED_ACQ pid=3724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:22.127000 audit[3724]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbbbcbe40 a2=3 a3=0 items=0 ppid=1 pid=3724 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:22.127000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:22.129895 sshd[3724]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:22.135539 systemd[1]: Started session-24.scope. Oct 2 19:11:22.136265 systemd-logind[1626]: New session 24 of user core. Oct 2 19:11:22.140000 audit[3724]: USER_START pid=3724 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:22.141000 audit[3726]: CRED_ACQ pid=3726 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:22.402323 sshd[3724]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:22.402000 audit[3724]: USER_END pid=3724 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:22.402000 audit[3724]: CRED_DISP pid=3724 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:22.406186 systemd[1]: sshd@23-172.31.27.122:22-139.178.89.65:53000.service: Deactivated successfully. Oct 2 19:11:22.407296 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:11:22.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.122:22-139.178.89.65:53000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:22.408199 systemd-logind[1626]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:11:22.409134 systemd-logind[1626]: Removed session 24. Oct 2 19:11:23.030875 kubelet[2646]: E1002 19:11:23.030836 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:28.032435 kubelet[2646]: E1002 19:11:28.032397 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:29.966792 kubelet[2646]: E1002 19:11:29.963025 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:11:32.433804 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:11:32.434014 kernel: audit: type=1130 audit(1696273892.428:1305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.122:22-139.178.89.65:55832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:32.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.122:22-139.178.89.65:55832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:32.430547 systemd[1]: Started sshd@24-172.31.27.122:22-139.178.89.65:55832.service. Oct 2 19:11:32.605000 audit[3738]: USER_ACCT pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.607181 sshd[3738]: Accepted publickey for core from 139.178.89.65 port 55832 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:11:32.616897 kernel: audit: type=1101 audit(1696273892.605:1306): pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.617011 kernel: audit: type=1103 audit(1696273892.611:1307): pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.611000 audit[3738]: CRED_ACQ pid=3738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.614182 sshd[3738]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:32.629226 systemd[1]: Started session-25.scope. Oct 2 19:11:32.630704 kernel: audit: type=1006 audit(1696273892.611:1308): pid=3738 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:11:32.630774 kernel: audit: type=1300 audit(1696273892.611:1308): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe276da640 a2=3 a3=0 items=0 ppid=1 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.611000 audit[3738]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe276da640 a2=3 a3=0 items=0 ppid=1 pid=3738 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:32.633228 systemd-logind[1626]: New session 25 of user core. Oct 2 19:11:32.611000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:32.639816 kernel: audit: type=1327 audit(1696273892.611:1308): proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:32.641000 audit[3738]: USER_START pid=3738 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.647000 audit[3740]: CRED_ACQ pid=3740 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.663469 kernel: audit: type=1105 audit(1696273892.641:1309): pid=3738 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.663601 kernel: audit: type=1103 audit(1696273892.647:1310): pid=3740 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.861318 sshd[3738]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:32.861000 audit[3738]: USER_END pid=3738 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.865617 systemd-logind[1626]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:11:32.867457 systemd[1]: sshd@24-172.31.27.122:22-139.178.89.65:55832.service: Deactivated successfully. Oct 2 19:11:32.868365 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:11:32.870314 systemd-logind[1626]: Removed session 25. Oct 2 19:11:32.861000 audit[3738]: CRED_DISP pid=3738 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.876140 kernel: audit: type=1106 audit(1696273892.861:1311): pid=3738 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.876254 kernel: audit: type=1104 audit(1696273892.861:1312): pid=3738 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:32.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.122:22-139.178.89.65:55832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:33.034347 kubelet[2646]: E1002 19:11:33.034306 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:38.035925 kubelet[2646]: E1002 19:11:38.035887 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:40.968197 env[1638]: time="2023-10-02T19:11:40.968146413Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:11:40.985487 env[1638]: time="2023-10-02T19:11:40.985435726Z" level=info msg="CreateContainer within sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\"" Oct 2 19:11:40.986284 env[1638]: time="2023-10-02T19:11:40.986235912Z" level=info msg="StartContainer for \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\"" Oct 2 19:11:41.023369 systemd[1]: Started cri-containerd-3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9.scope. Oct 2 19:11:41.038953 systemd[1]: cri-containerd-3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9.scope: Deactivated successfully. Oct 2 19:11:41.066743 env[1638]: time="2023-10-02T19:11:41.066686542Z" level=info msg="shim disconnected" id=3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9 Oct 2 19:11:41.066743 env[1638]: time="2023-10-02T19:11:41.066740760Z" level=warning msg="cleaning up after shim disconnected" id=3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9 namespace=k8s.io Oct 2 19:11:41.067130 env[1638]: time="2023-10-02T19:11:41.066753242Z" level=info msg="cleaning up dead shim" Oct 2 19:11:41.076673 env[1638]: time="2023-10-02T19:11:41.076631553Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:11:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3773 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:11:41Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:11:41.077017 env[1638]: time="2023-10-02T19:11:41.076951520Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:11:41.078561 env[1638]: time="2023-10-02T19:11:41.078517499Z" level=error msg="Failed to pipe stdout of container \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\"" error="reading from a closed fifo" Oct 2 19:11:41.078672 env[1638]: time="2023-10-02T19:11:41.078580576Z" level=error msg="Failed to pipe stderr of container \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\"" error="reading from a closed fifo" Oct 2 19:11:41.081005 env[1638]: time="2023-10-02T19:11:41.080959474Z" level=error msg="StartContainer for \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:11:41.081262 kubelet[2646]: E1002 19:11:41.081234 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9" Oct 2 19:11:41.081629 kubelet[2646]: E1002 19:11:41.081367 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:11:41.081629 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:11:41.081629 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:11:41.081629 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-twcjp,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:11:41.081629 kubelet[2646]: E1002 19:11:41.081418 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:11:41.727168 kubelet[2646]: I1002 19:11:41.727066 2646 scope.go:115] "RemoveContainer" containerID="c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944" Oct 2 19:11:41.727645 kubelet[2646]: I1002 19:11:41.727422 2646 scope.go:115] "RemoveContainer" containerID="c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944" Oct 2 19:11:41.728978 env[1638]: time="2023-10-02T19:11:41.728863214Z" level=info msg="RemoveContainer for \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\"" Oct 2 19:11:41.729975 env[1638]: time="2023-10-02T19:11:41.729945601Z" level=info msg="RemoveContainer for \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\"" Oct 2 19:11:41.730196 env[1638]: time="2023-10-02T19:11:41.730160064Z" level=error msg="RemoveContainer for \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\" failed" error="failed to set removing state for container \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\": container is already in removing state" Oct 2 19:11:41.730845 kubelet[2646]: E1002 19:11:41.730540 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\": container is already in removing state" containerID="c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944" Oct 2 19:11:41.730845 kubelet[2646]: E1002 19:11:41.730575 2646 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944": container is already in removing state; Skipping pod "cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)" Oct 2 19:11:41.732667 kubelet[2646]: E1002 19:11:41.732648 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:11:41.734824 env[1638]: time="2023-10-02T19:11:41.734788959Z" level=info msg="RemoveContainer for \"c9ed01d49417c9ae5695e837f95349671490cf0515a9359ac38b5ec13f1b2944\" returns successfully" Oct 2 19:11:41.978274 systemd[1]: run-containerd-runc-k8s.io-3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9-runc.sGDSvx.mount: Deactivated successfully. Oct 2 19:11:41.978413 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9-rootfs.mount: Deactivated successfully. Oct 2 19:11:42.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.122:22-139.178.89.65:40514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:42.887431 systemd[1]: Started sshd@25-172.31.27.122:22-139.178.89.65:40514.service. Oct 2 19:11:42.889916 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:11:42.891671 kernel: audit: type=1130 audit(1696273902.885:1314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.122:22-139.178.89.65:40514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:43.037707 kubelet[2646]: E1002 19:11:43.037664 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:43.058000 audit[3787]: USER_ACCT pid=3787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.066725 sshd[3787]: Accepted publickey for core from 139.178.89.65 port 40514 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:11:43.067115 kernel: audit: type=1101 audit(1696273903.058:1315): pid=3787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.065000 audit[3787]: CRED_ACQ pid=3787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.067835 sshd[3787]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:43.075432 kernel: audit: type=1103 audit(1696273903.065:1316): pid=3787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.075628 kernel: audit: type=1006 audit(1696273903.065:1317): pid=3787 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:11:43.074911 systemd[1]: Started session-26.scope. Oct 2 19:11:43.076950 systemd-logind[1626]: New session 26 of user core. Oct 2 19:11:43.065000 audit[3787]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd771cd2f0 a2=3 a3=0 items=0 ppid=1 pid=3787 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:43.085299 kernel: audit: type=1300 audit(1696273903.065:1317): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd771cd2f0 a2=3 a3=0 items=0 ppid=1 pid=3787 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:43.085405 kernel: audit: type=1327 audit(1696273903.065:1317): proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:43.065000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:43.083000 audit[3787]: USER_START pid=3787 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.086000 audit[3789]: CRED_ACQ pid=3789 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.112253 kernel: audit: type=1105 audit(1696273903.083:1318): pid=3787 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.112380 kernel: audit: type=1103 audit(1696273903.086:1319): pid=3789 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.337970 sshd[3787]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:43.337000 audit[3787]: USER_END pid=3787 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.341977 systemd[1]: sshd@25-172.31.27.122:22-139.178.89.65:40514.service: Deactivated successfully. Oct 2 19:11:43.343180 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:11:43.347826 kernel: audit: type=1106 audit(1696273903.337:1320): pid=3787 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.337000 audit[3787]: CRED_DISP pid=3787 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.348748 systemd-logind[1626]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:11:43.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.122:22-139.178.89.65:40514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:43.354833 kernel: audit: type=1104 audit(1696273903.337:1321): pid=3787 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:43.355162 systemd-logind[1626]: Removed session 26. Oct 2 19:11:44.171922 kubelet[2646]: W1002 19:11:44.171873 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice/cri-containerd-3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9.scope WatchSource:0}: task 3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9 not found: not found Oct 2 19:11:48.038484 kubelet[2646]: E1002 19:11:48.038446 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:53.039839 kubelet[2646]: E1002 19:11:53.039746 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:11:53.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.122:22-139.178.89.65:50952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:53.374886 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:11:53.375161 kernel: audit: type=1130 audit(1696273913.371:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.122:22-139.178.89.65:50952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:53.372391 systemd[1]: Started sshd@26-172.31.27.122:22-139.178.89.65:50952.service. Oct 2 19:11:53.553000 audit[3799]: USER_ACCT pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.555693 sshd[3799]: Accepted publickey for core from 139.178.89.65 port 50952 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:11:53.561888 kernel: audit: type=1101 audit(1696273913.553:1324): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.560000 audit[3799]: CRED_ACQ pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.563346 sshd[3799]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:11:53.574647 systemd[1]: Started session-27.scope. Oct 2 19:11:53.576142 kernel: audit: type=1103 audit(1696273913.560:1325): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.576237 kernel: audit: type=1006 audit(1696273913.560:1326): pid=3799 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:11:53.576272 kernel: audit: type=1300 audit(1696273913.560:1326): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc542bd4c0 a2=3 a3=0 items=0 ppid=1 pid=3799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:53.560000 audit[3799]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc542bd4c0 a2=3 a3=0 items=0 ppid=1 pid=3799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:11:53.576577 systemd-logind[1626]: New session 27 of user core. Oct 2 19:11:53.560000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:53.585731 kernel: audit: type=1327 audit(1696273913.560:1326): proctitle=737368643A20636F7265205B707269765D Oct 2 19:11:53.588000 audit[3799]: USER_START pid=3799 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.598099 kernel: audit: type=1105 audit(1696273913.588:1327): pid=3799 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.598197 kernel: audit: type=1103 audit(1696273913.588:1328): pid=3801 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.588000 audit[3801]: CRED_ACQ pid=3801 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.804244 sshd[3799]: pam_unix(sshd:session): session closed for user core Oct 2 19:11:53.803000 audit[3799]: USER_END pid=3799 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.808025 systemd-logind[1626]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:11:53.809784 systemd[1]: sshd@26-172.31.27.122:22-139.178.89.65:50952.service: Deactivated successfully. Oct 2 19:11:53.810686 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:11:53.803000 audit[3799]: CRED_DISP pid=3799 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.815782 systemd-logind[1626]: Removed session 27. Oct 2 19:11:53.816784 kernel: audit: type=1106 audit(1696273913.803:1329): pid=3799 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.816834 kernel: audit: type=1104 audit(1696273913.803:1330): pid=3799 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:11:53.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.122:22-139.178.89.65:50952 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:11:55.962931 kubelet[2646]: E1002 19:11:55.962896 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lff7d_kube-system(8a30ffe6-d3bd-466a-8178-e1adb81885f5)\"" pod="kube-system/cilium-lff7d" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 Oct 2 19:11:58.040573 kubelet[2646]: E1002 19:11:58.040544 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:02.452000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:02.456095 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:12:02.456194 kernel: audit: type=1400 audit(1696273922.452:1332): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:02.452000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6dbe0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:02.469184 kernel: audit: type=1300 audit(1696273922.452:1332): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e6dbe0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:02.469329 kernel: audit: type=1327 audit(1696273922.452:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:02.452000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:02.455000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:02.481900 kernel: audit: type=1400 audit(1696273922.455:1333): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:02.482032 kernel: audit: type=1300 audit(1696273922.455:1333): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00047e2a0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:02.455000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00047e2a0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:02.489740 kernel: audit: type=1327 audit(1696273922.455:1333): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:02.455000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:03.041964 kubelet[2646]: E1002 19:12:03.041935 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:03.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.122:22-139.178.89.65:49842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:03.835273 systemd[1]: Started sshd@27-172.31.27.122:22-139.178.89.65:49842.service. Oct 2 19:12:03.855568 kernel: audit: type=1130 audit(1696273923.833:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.122:22-139.178.89.65:49842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.181887 kernel: audit: type=1101 audit(1696273924.156:1335): pid=3814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.156000 audit[3814]: USER_ACCT pid=3814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.182170 sshd[3814]: Accepted publickey for core from 139.178.89.65 port 49842 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:12:04.181000 audit[3814]: CRED_ACQ pid=3814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.184748 sshd[3814]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:04.191713 kernel: audit: type=1103 audit(1696273924.181:1336): pid=3814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.191900 kernel: audit: type=1006 audit(1696273924.181:1337): pid=3814 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:12:04.194207 systemd-logind[1626]: New session 28 of user core. Oct 2 19:12:04.181000 audit[3814]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff27ef65b0 a2=3 a3=0 items=0 ppid=1 pid=3814 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:04.181000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:04.195316 systemd[1]: Started session-28.scope. Oct 2 19:12:04.200000 audit[3814]: USER_START pid=3814 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.208000 audit[3816]: CRED_ACQ pid=3816 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.278000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:04.278000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00d523940 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:12:04.278000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:12:04.280000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:04.280000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:04.280000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c013497830 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:12:04.280000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0135b66c0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:12:04.280000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:12:04.280000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:12:04.288000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:04.288000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0134978c0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:12:04.288000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:12:04.305000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:04.305000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0135b67e0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:12:04.305000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:12:04.306000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:04.306000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00d53ac40 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:12:04.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:12:04.449121 sshd[3814]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:04.450000 audit[3814]: USER_END pid=3814 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.450000 audit[3814]: CRED_DISP pid=3814 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.453623 systemd-logind[1626]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:12:04.453877 systemd[1]: sshd@27-172.31.27.122:22-139.178.89.65:49842.service: Deactivated successfully. Oct 2 19:12:04.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.122:22-139.178.89.65:49842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.454848 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:12:04.455687 systemd-logind[1626]: Removed session 28. Oct 2 19:12:04.475933 systemd[1]: Started sshd@28-172.31.27.122:22-139.178.89.65:49846.service. Oct 2 19:12:04.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.122:22-139.178.89.65:49846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:04.642000 audit[3827]: USER_ACCT pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.645700 sshd[3827]: Accepted publickey for core from 139.178.89.65 port 49846 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:12:04.645000 audit[3827]: CRED_ACQ pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.645000 audit[3827]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec1913e90 a2=3 a3=0 items=0 ppid=1 pid=3827 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:04.645000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:04.647876 sshd[3827]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:04.656488 systemd[1]: Started session-29.scope. Oct 2 19:12:04.657048 systemd-logind[1626]: New session 29 of user core. Oct 2 19:12:04.662000 audit[3827]: USER_START pid=3827 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:04.664000 audit[3830]: CRED_ACQ pid=3830 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:06.748630 env[1638]: time="2023-10-02T19:12:06.748267986Z" level=info msg="StopPodSandbox for \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\"" Oct 2 19:12:06.748630 env[1638]: time="2023-10-02T19:12:06.748370430Z" level=info msg="Container to stop \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:12:06.752814 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24-shm.mount: Deactivated successfully. Oct 2 19:12:06.773259 systemd[1]: cri-containerd-99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24.scope: Deactivated successfully. Oct 2 19:12:06.771000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:12:06.775000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:12:06.809125 env[1638]: time="2023-10-02T19:12:06.809069330Z" level=info msg="StopContainer for \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\" with timeout 30 (s)" Oct 2 19:12:06.812914 env[1638]: time="2023-10-02T19:12:06.811909723Z" level=info msg="Stop container \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\" with signal terminated" Oct 2 19:12:06.821025 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24-rootfs.mount: Deactivated successfully. Oct 2 19:12:06.832063 env[1638]: time="2023-10-02T19:12:06.832015352Z" level=info msg="shim disconnected" id=99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24 Oct 2 19:12:06.832788 env[1638]: time="2023-10-02T19:12:06.832742037Z" level=warning msg="cleaning up after shim disconnected" id=99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24 namespace=k8s.io Oct 2 19:12:06.832916 env[1638]: time="2023-10-02T19:12:06.832898138Z" level=info msg="cleaning up dead shim" Oct 2 19:12:06.833629 systemd[1]: cri-containerd-d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318.scope: Deactivated successfully. Oct 2 19:12:06.832000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:12:06.835000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:12:06.852740 env[1638]: time="2023-10-02T19:12:06.852692568Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3859 runtime=io.containerd.runc.v2\n" Oct 2 19:12:06.853574 env[1638]: time="2023-10-02T19:12:06.853539485Z" level=info msg="TearDown network for sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" successfully" Oct 2 19:12:06.853738 env[1638]: time="2023-10-02T19:12:06.853702311Z" level=info msg="StopPodSandbox for \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" returns successfully" Oct 2 19:12:06.869228 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318-rootfs.mount: Deactivated successfully. Oct 2 19:12:06.886331 env[1638]: time="2023-10-02T19:12:06.884955948Z" level=info msg="shim disconnected" id=d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318 Oct 2 19:12:06.886579 env[1638]: time="2023-10-02T19:12:06.886339441Z" level=warning msg="cleaning up after shim disconnected" id=d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318 namespace=k8s.io Oct 2 19:12:06.886579 env[1638]: time="2023-10-02T19:12:06.886357833Z" level=info msg="cleaning up dead shim" Oct 2 19:12:06.899943 env[1638]: time="2023-10-02T19:12:06.899883323Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3885 runtime=io.containerd.runc.v2\n" Oct 2 19:12:06.903394 env[1638]: time="2023-10-02T19:12:06.903345218Z" level=info msg="StopContainer for \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\" returns successfully" Oct 2 19:12:06.904337 env[1638]: time="2023-10-02T19:12:06.904305791Z" level=info msg="StopPodSandbox for \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\"" Oct 2 19:12:06.907984 env[1638]: time="2023-10-02T19:12:06.904378378Z" level=info msg="Container to stop \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:12:06.906622 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b-shm.mount: Deactivated successfully. Oct 2 19:12:06.914817 systemd[1]: cri-containerd-3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b.scope: Deactivated successfully. Oct 2 19:12:06.913000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:12:06.918000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:12:06.943937 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b-rootfs.mount: Deactivated successfully. Oct 2 19:12:06.965981 env[1638]: time="2023-10-02T19:12:06.965838503Z" level=info msg="shim disconnected" id=3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b Oct 2 19:12:06.965981 env[1638]: time="2023-10-02T19:12:06.965905570Z" level=warning msg="cleaning up after shim disconnected" id=3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b namespace=k8s.io Oct 2 19:12:06.965981 env[1638]: time="2023-10-02T19:12:06.965919300Z" level=info msg="cleaning up dead shim" Oct 2 19:12:06.978224 env[1638]: time="2023-10-02T19:12:06.978167926Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3916 runtime=io.containerd.runc.v2\n" Oct 2 19:12:06.978572 env[1638]: time="2023-10-02T19:12:06.978533512Z" level=info msg="TearDown network for sandbox \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" successfully" Oct 2 19:12:06.978572 env[1638]: time="2023-10-02T19:12:06.978562670Z" level=info msg="StopPodSandbox for \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" returns successfully" Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031699 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-etc-cni-netd\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031750 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-kernel\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031797 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-twcjp\" (UniqueName: \"kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-kube-api-access-twcjp\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031825 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-bpf-maps\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031848 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-run\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031877 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hubble-tls\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031900 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hostproc\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.031924 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-net\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032121 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cni-path\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032172 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8a30ffe6-d3bd-466a-8178-e1adb81885f5-clustermesh-secrets\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032202 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-lib-modules\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032235 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-config-path\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032269 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-cgroup\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032297 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-xtables-lock\") pod \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\" (UID: \"8a30ffe6-d3bd-466a-8178-e1adb81885f5\") " Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032370 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.033189 kubelet[2646]: I1002 19:12:07.032414 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.034122 kubelet[2646]: I1002 19:12:07.032436 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.034230 kubelet[2646]: I1002 19:12:07.034200 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.034364 kubelet[2646]: I1002 19:12:07.034344 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.034439 kubelet[2646]: I1002 19:12:07.034374 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.034647 kubelet[2646]: I1002 19:12:07.034624 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hostproc" (OuterVolumeSpecName: "hostproc") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.034962 kubelet[2646]: I1002 19:12:07.034659 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.034962 kubelet[2646]: I1002 19:12:07.034761 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cni-path" (OuterVolumeSpecName: "cni-path") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.035299 kubelet[2646]: W1002 19:12:07.035260 2646 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/8a30ffe6-d3bd-466a-8178-e1adb81885f5/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:12:07.037256 kubelet[2646]: I1002 19:12:07.037227 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:12:07.037351 kubelet[2646]: I1002 19:12:07.037282 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:12:07.043002 kubelet[2646]: I1002 19:12:07.042963 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-kube-api-access-twcjp" (OuterVolumeSpecName: "kube-api-access-twcjp") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "kube-api-access-twcjp". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:12:07.043940 kubelet[2646]: I1002 19:12:07.043911 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8a30ffe6-d3bd-466a-8178-e1adb81885f5-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:12:07.044302 kubelet[2646]: I1002 19:12:07.044274 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "8a30ffe6-d3bd-466a-8178-e1adb81885f5" (UID: "8a30ffe6-d3bd-466a-8178-e1adb81885f5"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:12:07.132477 kubelet[2646]: I1002 19:12:07.132435 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a6a33390-ddfc-46ba-945d-40f7b7db3834-cilium-config-path\") pod \"a6a33390-ddfc-46ba-945d-40f7b7db3834\" (UID: \"a6a33390-ddfc-46ba-945d-40f7b7db3834\") " Oct 2 19:12:07.132477 kubelet[2646]: I1002 19:12:07.132483 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-646wq\" (UniqueName: \"kubernetes.io/projected/a6a33390-ddfc-46ba-945d-40f7b7db3834-kube-api-access-646wq\") pod \"a6a33390-ddfc-46ba-945d-40f7b7db3834\" (UID: \"a6a33390-ddfc-46ba-945d-40f7b7db3834\") " Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132519 2646 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-net\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132531 2646 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cni-path\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132543 2646 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8a30ffe6-d3bd-466a-8178-e1adb81885f5-clustermesh-secrets\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132552 2646 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hostproc\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132561 2646 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-lib-modules\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132570 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-config-path\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132580 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-cgroup\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132589 2646 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-xtables-lock\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132599 2646 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-etc-cni-netd\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132608 2646 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-twcjp\" (UniqueName: \"kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-kube-api-access-twcjp\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132617 2646 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-bpf-maps\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132627 2646 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-host-proc-sys-kernel\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132636 2646 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8a30ffe6-d3bd-466a-8178-e1adb81885f5-hubble-tls\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.132674 kubelet[2646]: I1002 19:12:07.132644 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8a30ffe6-d3bd-466a-8178-e1adb81885f5-cilium-run\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.133233 kubelet[2646]: W1002 19:12:07.133152 2646 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/a6a33390-ddfc-46ba-945d-40f7b7db3834/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:12:07.135027 kubelet[2646]: I1002 19:12:07.134994 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/a6a33390-ddfc-46ba-945d-40f7b7db3834-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "a6a33390-ddfc-46ba-945d-40f7b7db3834" (UID: "a6a33390-ddfc-46ba-945d-40f7b7db3834"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:12:07.138405 kubelet[2646]: I1002 19:12:07.138374 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a6a33390-ddfc-46ba-945d-40f7b7db3834-kube-api-access-646wq" (OuterVolumeSpecName: "kube-api-access-646wq") pod "a6a33390-ddfc-46ba-945d-40f7b7db3834" (UID: "a6a33390-ddfc-46ba-945d-40f7b7db3834"). InnerVolumeSpecName "kube-api-access-646wq". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:12:07.233611 kubelet[2646]: I1002 19:12:07.233575 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a6a33390-ddfc-46ba-945d-40f7b7db3834-cilium-config-path\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.233611 kubelet[2646]: I1002 19:12:07.233610 2646 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-646wq\" (UniqueName: \"kubernetes.io/projected/a6a33390-ddfc-46ba-945d-40f7b7db3834-kube-api-access-646wq\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:12:07.750626 systemd[1]: var-lib-kubelet-pods-8a30ffe6\x2dd3bd\x2d466a\x2d8178\x2de1adb81885f5-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:12:07.750804 systemd[1]: var-lib-kubelet-pods-8a30ffe6\x2dd3bd\x2d466a\x2d8178\x2de1adb81885f5-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dtwcjp.mount: Deactivated successfully. Oct 2 19:12:07.750899 systemd[1]: var-lib-kubelet-pods-a6a33390\x2dddfc\x2d46ba\x2d945d\x2d40f7b7db3834-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d646wq.mount: Deactivated successfully. Oct 2 19:12:07.750990 systemd[1]: var-lib-kubelet-pods-8a30ffe6\x2dd3bd\x2d466a\x2d8178\x2de1adb81885f5-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:12:07.791141 kubelet[2646]: I1002 19:12:07.791115 2646 scope.go:115] "RemoveContainer" containerID="3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9" Oct 2 19:12:07.795379 systemd[1]: Removed slice kubepods-burstable-pod8a30ffe6_d3bd_466a_8178_e1adb81885f5.slice. Oct 2 19:12:07.799271 env[1638]: time="2023-10-02T19:12:07.798896850Z" level=info msg="RemoveContainer for \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\"" Oct 2 19:12:07.802555 env[1638]: time="2023-10-02T19:12:07.802516898Z" level=info msg="RemoveContainer for \"3264cc1f2286af6f5d52241daf8202cd62e4f93683746c582871829cf4db30b9\" returns successfully" Oct 2 19:12:07.804495 kubelet[2646]: I1002 19:12:07.804441 2646 scope.go:115] "RemoveContainer" containerID="d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318" Oct 2 19:12:07.805742 systemd[1]: Removed slice kubepods-besteffort-poda6a33390_ddfc_46ba_945d_40f7b7db3834.slice. Oct 2 19:12:07.807040 env[1638]: time="2023-10-02T19:12:07.806902599Z" level=info msg="RemoveContainer for \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\"" Oct 2 19:12:07.811370 env[1638]: time="2023-10-02T19:12:07.811305058Z" level=info msg="RemoveContainer for \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\" returns successfully" Oct 2 19:12:07.811736 kubelet[2646]: I1002 19:12:07.811714 2646 scope.go:115] "RemoveContainer" containerID="d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318" Oct 2 19:12:07.812301 env[1638]: time="2023-10-02T19:12:07.812221484Z" level=error msg="ContainerStatus for \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\": not found" Oct 2 19:12:07.812589 kubelet[2646]: E1002 19:12:07.812561 2646 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\": not found" containerID="d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318" Oct 2 19:12:07.812679 kubelet[2646]: I1002 19:12:07.812611 2646 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318} err="failed to get container status \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\": rpc error: code = NotFound desc = an error occurred when try to find container \"d67e05efcfca7b36c42b7b49de57d5045f389b2b6b942be5e5e0cd912144b318\": not found" Oct 2 19:12:07.868985 env[1638]: time="2023-10-02T19:12:07.868760794Z" level=info msg="StopPodSandbox for \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\"" Oct 2 19:12:07.868985 env[1638]: time="2023-10-02T19:12:07.868888698Z" level=info msg="TearDown network for sandbox \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" successfully" Oct 2 19:12:07.868985 env[1638]: time="2023-10-02T19:12:07.868922748Z" level=info msg="StopPodSandbox for \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" returns successfully" Oct 2 19:12:07.869483 env[1638]: time="2023-10-02T19:12:07.869449572Z" level=info msg="RemovePodSandbox for \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\"" Oct 2 19:12:07.869571 env[1638]: time="2023-10-02T19:12:07.869481822Z" level=info msg="Forcibly stopping sandbox \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\"" Oct 2 19:12:07.869619 env[1638]: time="2023-10-02T19:12:07.869567264Z" level=info msg="TearDown network for sandbox \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" successfully" Oct 2 19:12:07.873254 env[1638]: time="2023-10-02T19:12:07.873214290Z" level=info msg="RemovePodSandbox \"3700148c516541c914e86b1bf90e35f974c62ca6c7332892c96c0d2ef2d4206b\" returns successfully" Oct 2 19:12:07.873760 env[1638]: time="2023-10-02T19:12:07.873725934Z" level=info msg="StopPodSandbox for \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\"" Oct 2 19:12:07.873875 env[1638]: time="2023-10-02T19:12:07.873821140Z" level=info msg="TearDown network for sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" successfully" Oct 2 19:12:07.873875 env[1638]: time="2023-10-02T19:12:07.873865761Z" level=info msg="StopPodSandbox for \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" returns successfully" Oct 2 19:12:07.874197 env[1638]: time="2023-10-02T19:12:07.874166633Z" level=info msg="RemovePodSandbox for \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\"" Oct 2 19:12:07.874292 env[1638]: time="2023-10-02T19:12:07.874200061Z" level=info msg="Forcibly stopping sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\"" Oct 2 19:12:07.874292 env[1638]: time="2023-10-02T19:12:07.874275129Z" level=info msg="TearDown network for sandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" successfully" Oct 2 19:12:07.878027 env[1638]: time="2023-10-02T19:12:07.877989968Z" level=info msg="RemovePodSandbox \"99003efe8bb273b4018ce5d8e5be45e25c7baa2cf238f9c8dc25dd67a0955e24\" returns successfully" Oct 2 19:12:07.964961 kubelet[2646]: I1002 19:12:07.964921 2646 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=8a30ffe6-d3bd-466a-8178-e1adb81885f5 path="/var/lib/kubelet/pods/8a30ffe6-d3bd-466a-8178-e1adb81885f5/volumes" Oct 2 19:12:07.965504 kubelet[2646]: I1002 19:12:07.965479 2646 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=a6a33390-ddfc-46ba-945d-40f7b7db3834 path="/var/lib/kubelet/pods/a6a33390-ddfc-46ba-945d-40f7b7db3834/volumes" Oct 2 19:12:08.043547 kubelet[2646]: E1002 19:12:08.043452 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:08.722169 sshd[3827]: pam_unix(sshd:session): session closed for user core Oct 2 19:12:08.721000 audit[3827]: USER_END pid=3827 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.725076 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 19:12:08.725164 kernel: audit: type=1106 audit(1696273928.721:1361): pid=3827 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.726295 systemd-logind[1626]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:12:08.728961 systemd[1]: sshd@28-172.31.27.122:22-139.178.89.65:49846.service: Deactivated successfully. Oct 2 19:12:08.729865 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:12:08.730048 systemd[1]: session-29.scope: Consumed 1.072s CPU time. Oct 2 19:12:08.732374 systemd-logind[1626]: Removed session 29. Oct 2 19:12:08.721000 audit[3827]: CRED_DISP pid=3827 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.733792 kernel: audit: type=1104 audit(1696273928.721:1362): pid=3827 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.740065 kernel: audit: type=1131 audit(1696273928.724:1363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.122:22-139.178.89.65:49846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:08.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.122:22-139.178.89.65:49846 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:08.751296 systemd[1]: Started sshd@29-172.31.27.122:22-139.178.89.65:59212.service. Oct 2 19:12:08.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.27.122:22-139.178.89.65:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:08.757890 kernel: audit: type=1130 audit(1696273928.749:1364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.27.122:22-139.178.89.65:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:12:08.925000 audit[3937]: USER_ACCT pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.934034 kernel: audit: type=1101 audit(1696273928.925:1365): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.934100 sshd[3937]: Accepted publickey for core from 139.178.89.65 port 59212 ssh2: RSA SHA256:x9/OT7ro8vjSge/fuA4/NJq92bLfWcOP18P7B4SEcY0 Oct 2 19:12:08.932000 audit[3937]: CRED_ACQ pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.935009 sshd[3937]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:12:08.942169 systemd[1]: Started session-30.scope. Oct 2 19:12:08.945485 kernel: audit: type=1103 audit(1696273928.932:1366): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.945591 kernel: audit: type=1006 audit(1696273928.932:1367): pid=3937 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:12:08.945624 kernel: audit: type=1300 audit(1696273928.932:1367): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2e65ca80 a2=3 a3=0 items=0 ppid=1 pid=3937 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:08.932000 audit[3937]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2e65ca80 a2=3 a3=0 items=0 ppid=1 pid=3937 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:08.944837 systemd-logind[1626]: New session 30 of user core. Oct 2 19:12:08.955307 kernel: audit: type=1327 audit(1696273928.932:1367): proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:08.955417 kernel: audit: type=1105 audit(1696273928.950:1368): pid=3937 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.932000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:12:08.950000 audit[3937]: USER_START pid=3937 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:08.952000 audit[3939]: CRED_ACQ pid=3939 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:12:09.960465 kubelet[2646]: I1002 19:12:09.960408 2646 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:12:09.961190 kubelet[2646]: E1002 19:12:09.961172 2646 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.961299 kubelet[2646]: E1002 19:12:09.961287 2646 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.961405 kubelet[2646]: E1002 19:12:09.961394 2646 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="a6a33390-ddfc-46ba-945d-40f7b7db3834" containerName="cilium-operator" Oct 2 19:12:09.961484 kubelet[2646]: E1002 19:12:09.961476 2646 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.961553 kubelet[2646]: E1002 19:12:09.961545 2646 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.961621 kubelet[2646]: E1002 19:12:09.961612 2646 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.961750 kubelet[2646]: I1002 19:12:09.961737 2646 memory_manager.go:346] "RemoveStaleState removing state" podUID="a6a33390-ddfc-46ba-945d-40f7b7db3834" containerName="cilium-operator" Oct 2 19:12:09.961864 kubelet[2646]: I1002 19:12:09.961853 2646 memory_manager.go:346] "RemoveStaleState removing state" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.961935 kubelet[2646]: I1002 19:12:09.961927 2646 memory_manager.go:346] "RemoveStaleState removing state" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.964018 kubelet[2646]: I1002 19:12:09.961991 2646 memory_manager.go:346] "RemoveStaleState removing state" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.964018 kubelet[2646]: E1002 19:12:09.962028 2646 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.964018 kubelet[2646]: I1002 19:12:09.962052 2646 memory_manager.go:346] "RemoveStaleState removing state" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.964018 kubelet[2646]: I1002 19:12:09.962062 2646 memory_manager.go:346] "RemoveStaleState removing state" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.964018 kubelet[2646]: I1002 19:12:09.962099 2646 memory_manager.go:346] "RemoveStaleState removing state" podUID="8a30ffe6-d3bd-466a-8178-e1adb81885f5" containerName="mount-cgroup" Oct 2 19:12:09.981408 systemd[1]: Created slice kubepods-burstable-poda86d02f3_7b70_43d8_8dd7_918ad9405292.slice. Oct 2 19:12:10.054222 kubelet[2646]: I1002 19:12:10.054178 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-xtables-lock\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.054526 kubelet[2646]: I1002 19:12:10.054507 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-config-path\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.054713 kubelet[2646]: I1002 19:12:10.054700 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-kernel\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.054877 kubelet[2646]: I1002 19:12:10.054860 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-bpf-maps\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.055043 kubelet[2646]: I1002 19:12:10.055030 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cni-path\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.055191 kubelet[2646]: I1002 19:12:10.055179 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-ipsec-secrets\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.055501 kubelet[2646]: I1002 19:12:10.055477 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-cgroup\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.055644 kubelet[2646]: I1002 19:12:10.055632 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-etc-cni-netd\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.055795 kubelet[2646]: I1002 19:12:10.055785 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-lib-modules\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.056124 kubelet[2646]: I1002 19:12:10.056037 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-hostproc\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.056272 kubelet[2646]: I1002 19:12:10.056259 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-hubble-tls\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.056501 kubelet[2646]: I1002 19:12:10.056405 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-run\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.057729 kubelet[2646]: I1002 19:12:10.057696 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-net\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.057953 kubelet[2646]: I1002 19:12:10.057920 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-clustermesh-secrets\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.058240 kubelet[2646]: I1002 19:12:10.058226 2646 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7lnvh\" (UniqueName: \"kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-kube-api-access-7lnvh\") pod \"cilium-rcdxh\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " pod="kube-system/cilium-rcdxh" Oct 2 19:12:10.289217 env[1638]: time="2023-10-02T19:12:10.289102176Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rcdxh,Uid:a86d02f3-7b70-43d8-8dd7-918ad9405292,Namespace:kube-system,Attempt:0,}" Oct 2 19:12:10.315144 env[1638]: time="2023-10-02T19:12:10.315065233Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:12:10.315334 env[1638]: time="2023-10-02T19:12:10.315131005Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:12:10.315420 env[1638]: time="2023-10-02T19:12:10.315346188Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:12:10.315824 env[1638]: time="2023-10-02T19:12:10.315701419Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a pid=3958 runtime=io.containerd.runc.v2 Oct 2 19:12:10.331887 systemd[1]: Started cri-containerd-563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a.scope. Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.352000 audit: BPF prog-id=131 op=LOAD Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3958 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:10.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536336237343762376136343163333838383438333833616662623532 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=3958 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:10.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536336237343762376136343163333838383438333833616662623532 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.353000 audit: BPF prog-id=132 op=LOAD Oct 2 19:12:10.353000 audit[3968]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000098400 items=0 ppid=3958 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:10.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536336237343762376136343163333838383438333833616662623532 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.354000 audit: BPF prog-id=133 op=LOAD Oct 2 19:12:10.354000 audit[3968]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000098448 items=0 ppid=3958 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:10.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536336237343762376136343163333838383438333833616662623532 Oct 2 19:12:10.355000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:12:10.355000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { perfmon } for pid=3968 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit[3968]: AVC avc: denied { bpf } for pid=3968 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:12:10.355000 audit: BPF prog-id=134 op=LOAD Oct 2 19:12:10.355000 audit[3968]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000098858 items=0 ppid=3958 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:12:10.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536336237343762376136343163333838383438333833616662623532 Oct 2 19:12:10.376304 env[1638]: time="2023-10-02T19:12:10.376231775Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-rcdxh,Uid:a86d02f3-7b70-43d8-8dd7-918ad9405292,Namespace:kube-system,Attempt:0,} returns sandbox id \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\"" Oct 2 19:12:10.381643 env[1638]: time="2023-10-02T19:12:10.381602339Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:12:10.402299 env[1638]: time="2023-10-02T19:12:10.402248216Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\"" Oct 2 19:12:10.404799 env[1638]: time="2023-10-02T19:12:10.402908812Z" level=info msg="StartContainer for \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\"" Oct 2 19:12:10.425717 systemd[1]: Started cri-containerd-5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57.scope. Oct 2 19:12:10.443552 systemd[1]: cri-containerd-5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57.scope: Deactivated successfully. Oct 2 19:12:10.483381 env[1638]: time="2023-10-02T19:12:10.483329635Z" level=info msg="shim disconnected" id=5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57 Oct 2 19:12:10.485962 env[1638]: time="2023-10-02T19:12:10.485914380Z" level=warning msg="cleaning up after shim disconnected" id=5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57 namespace=k8s.io Oct 2 19:12:10.485962 env[1638]: time="2023-10-02T19:12:10.485944275Z" level=info msg="cleaning up dead shim" Oct 2 19:12:10.501883 env[1638]: time="2023-10-02T19:12:10.501822967Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4020 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:12:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:12:10.502388 env[1638]: time="2023-10-02T19:12:10.502224902Z" level=error msg="copy shim log" error="read /proc/self/fd/32: file already closed" Oct 2 19:12:10.504620 env[1638]: time="2023-10-02T19:12:10.504499012Z" level=error msg="Failed to pipe stdout of container \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\"" error="reading from a closed fifo" Oct 2 19:12:10.504763 env[1638]: time="2023-10-02T19:12:10.504578009Z" level=error msg="Failed to pipe stderr of container \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\"" error="reading from a closed fifo" Oct 2 19:12:10.507527 env[1638]: time="2023-10-02T19:12:10.507482703Z" level=error msg="StartContainer for \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:12:10.507790 kubelet[2646]: E1002 19:12:10.507746 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57" Oct 2 19:12:10.508373 kubelet[2646]: E1002 19:12:10.508029 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:12:10.508373 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:12:10.508373 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:12:10.508373 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7lnvh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:12:10.508373 kubelet[2646]: E1002 19:12:10.508232 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:10.815824 env[1638]: time="2023-10-02T19:12:10.815754209Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:12:10.837841 env[1638]: time="2023-10-02T19:12:10.837785763Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\"" Oct 2 19:12:10.838684 env[1638]: time="2023-10-02T19:12:10.838649020Z" level=info msg="StartContainer for \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\"" Oct 2 19:12:10.858671 systemd[1]: Started cri-containerd-63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080.scope. Oct 2 19:12:10.874998 systemd[1]: cri-containerd-63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080.scope: Deactivated successfully. Oct 2 19:12:10.891580 env[1638]: time="2023-10-02T19:12:10.891515213Z" level=info msg="shim disconnected" id=63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080 Oct 2 19:12:10.891580 env[1638]: time="2023-10-02T19:12:10.891578236Z" level=warning msg="cleaning up after shim disconnected" id=63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080 namespace=k8s.io Oct 2 19:12:10.891983 env[1638]: time="2023-10-02T19:12:10.891590799Z" level=info msg="cleaning up dead shim" Oct 2 19:12:10.902152 env[1638]: time="2023-10-02T19:12:10.902092553Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4057 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:12:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:12:10.902507 env[1638]: time="2023-10-02T19:12:10.902439264Z" level=error msg="copy shim log" error="read /proc/self/fd/32: file already closed" Oct 2 19:12:10.903881 env[1638]: time="2023-10-02T19:12:10.903834460Z" level=error msg="Failed to pipe stdout of container \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\"" error="reading from a closed fifo" Oct 2 19:12:10.904895 env[1638]: time="2023-10-02T19:12:10.904853640Z" level=error msg="Failed to pipe stderr of container \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\"" error="reading from a closed fifo" Oct 2 19:12:10.906917 env[1638]: time="2023-10-02T19:12:10.906870240Z" level=error msg="StartContainer for \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:12:10.907239 kubelet[2646]: E1002 19:12:10.907204 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080" Oct 2 19:12:10.909011 kubelet[2646]: E1002 19:12:10.908691 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:12:10.909011 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:12:10.909011 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:12:10.909011 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7lnvh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:12:10.909011 kubelet[2646]: E1002 19:12:10.908752 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:11.817828 kubelet[2646]: I1002 19:12:11.817799 2646 scope.go:115] "RemoveContainer" containerID="5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57" Oct 2 19:12:11.818439 kubelet[2646]: I1002 19:12:11.818388 2646 scope.go:115] "RemoveContainer" containerID="5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57" Oct 2 19:12:11.823346 env[1638]: time="2023-10-02T19:12:11.823223382Z" level=info msg="RemoveContainer for \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\"" Oct 2 19:12:11.825211 env[1638]: time="2023-10-02T19:12:11.825177604Z" level=info msg="RemoveContainer for \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\"" Oct 2 19:12:11.825331 env[1638]: time="2023-10-02T19:12:11.825289602Z" level=error msg="RemoveContainer for \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\" failed" error="failed to set removing state for container \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\": container is already in removing state" Oct 2 19:12:11.825498 kubelet[2646]: E1002 19:12:11.825480 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\": container is already in removing state" containerID="5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57" Oct 2 19:12:11.825614 kubelet[2646]: E1002 19:12:11.825521 2646 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57": container is already in removing state; Skipping pod "cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)" Oct 2 19:12:11.834201 kubelet[2646]: E1002 19:12:11.834172 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:11.837383 env[1638]: time="2023-10-02T19:12:11.837328529Z" level=info msg="RemoveContainer for \"5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57\" returns successfully" Oct 2 19:12:13.045196 kubelet[2646]: E1002 19:12:13.045163 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:13.595677 kubelet[2646]: W1002 19:12:13.595584 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda86d02f3_7b70_43d8_8dd7_918ad9405292.slice/cri-containerd-5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57.scope WatchSource:0}: container "5988be78c83ed31343d2e62007d915b7ffc10265b2f004934e1309c57bf60c57" in namespace "k8s.io": not found Oct 2 19:12:16.703609 kubelet[2646]: W1002 19:12:16.703566 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda86d02f3_7b70_43d8_8dd7_918ad9405292.slice/cri-containerd-63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080.scope WatchSource:0}: task 63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080 not found: not found Oct 2 19:12:18.046130 kubelet[2646]: E1002 19:12:18.046098 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:19.999000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:20.001887 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:12:20.002039 kernel: audit: type=1400 audit(1696273939.999:1388): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:19.999000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218d840 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:20.014458 kernel: audit: type=1300 audit(1696273939.999:1388): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218d840 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:20.014599 kernel: audit: type=1327 audit(1696273939.999:1388): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:19.999000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:20.012000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:20.026363 kernel: audit: type=1400 audit(1696273940.012:1389): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:20.026490 kernel: audit: type=1300 audit(1696273940.012:1389): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218d860 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:20.012000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218d860 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:20.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:20.039351 kernel: audit: type=1327 audit(1696273940.012:1389): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:20.039473 kernel: audit: type=1400 audit(1696273940.012:1390): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:20.012000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:20.012000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218d880 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:20.051982 kernel: audit: type=1300 audit(1696273940.012:1390): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218d880 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:20.052109 kernel: audit: type=1327 audit(1696273940.012:1390): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:20.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:20.012000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:20.063277 kernel: audit: type=1400 audit(1696273940.012:1391): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:12:20.012000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00218d8a0 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:12:20.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:12:23.047506 kubelet[2646]: E1002 19:12:23.047474 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:24.518999 amazon-ssm-agent[1614]: 2023-10-02 19:12:24 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:12:24.625869 amazon-ssm-agent[1614]: 2023-10-02 19:12:24 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-02a5b700d112f01d1 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-02a5b700d112f01d1 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:12:24.625869 amazon-ssm-agent[1614]: status code: 400, request id: fb266c93-d321-4cdf-98e0-42c2d7725913 Oct 2 19:12:24.966569 env[1638]: time="2023-10-02T19:12:24.966218009Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:12:24.989894 env[1638]: time="2023-10-02T19:12:24.989826973Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\"" Oct 2 19:12:24.991518 env[1638]: time="2023-10-02T19:12:24.991483008Z" level=info msg="StartContainer for \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\"" Oct 2 19:12:25.033501 systemd[1]: Started cri-containerd-7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d.scope. Oct 2 19:12:25.048968 systemd[1]: cri-containerd-7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d.scope: Deactivated successfully. Oct 2 19:12:25.065367 env[1638]: time="2023-10-02T19:12:25.065315462Z" level=info msg="shim disconnected" id=7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d Oct 2 19:12:25.065755 env[1638]: time="2023-10-02T19:12:25.065709939Z" level=warning msg="cleaning up after shim disconnected" id=7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d namespace=k8s.io Oct 2 19:12:25.065878 env[1638]: time="2023-10-02T19:12:25.065863023Z" level=info msg="cleaning up dead shim" Oct 2 19:12:25.076423 env[1638]: time="2023-10-02T19:12:25.076376217Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4098 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:12:25Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:12:25.076936 env[1638]: time="2023-10-02T19:12:25.076872419Z" level=error msg="copy shim log" error="read /proc/self/fd/32: file already closed" Oct 2 19:12:25.077162 env[1638]: time="2023-10-02T19:12:25.077116942Z" level=error msg="Failed to pipe stdout of container \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\"" error="reading from a closed fifo" Oct 2 19:12:25.080987 env[1638]: time="2023-10-02T19:12:25.080931970Z" level=error msg="Failed to pipe stderr of container \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\"" error="reading from a closed fifo" Oct 2 19:12:25.083097 env[1638]: time="2023-10-02T19:12:25.083030982Z" level=error msg="StartContainer for \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:12:25.083314 kubelet[2646]: E1002 19:12:25.083293 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d" Oct 2 19:12:25.083697 kubelet[2646]: E1002 19:12:25.083430 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:12:25.083697 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:12:25.083697 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:12:25.083697 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7lnvh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:12:25.083697 kubelet[2646]: E1002 19:12:25.083477 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:25.847493 kubelet[2646]: I1002 19:12:25.847453 2646 scope.go:115] "RemoveContainer" containerID="63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080" Oct 2 19:12:25.847872 kubelet[2646]: I1002 19:12:25.847853 2646 scope.go:115] "RemoveContainer" containerID="63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080" Oct 2 19:12:25.849651 env[1638]: time="2023-10-02T19:12:25.849614344Z" level=info msg="RemoveContainer for \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\"" Oct 2 19:12:25.850246 env[1638]: time="2023-10-02T19:12:25.850216509Z" level=info msg="RemoveContainer for \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\"" Oct 2 19:12:25.850381 env[1638]: time="2023-10-02T19:12:25.850330417Z" level=error msg="RemoveContainer for \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\" failed" error="failed to set removing state for container \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\": container is already in removing state" Oct 2 19:12:25.850543 kubelet[2646]: E1002 19:12:25.850525 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\": container is already in removing state" containerID="63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080" Oct 2 19:12:25.850619 kubelet[2646]: E1002 19:12:25.850563 2646 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080": container is already in removing state; Skipping pod "cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)" Oct 2 19:12:25.850998 kubelet[2646]: E1002 19:12:25.850971 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:25.853959 env[1638]: time="2023-10-02T19:12:25.853918749Z" level=info msg="RemoveContainer for \"63a9e6ccb8c8fdc6f229b439f23122c437b293650d532f2e287c7b3520744080\" returns successfully" Oct 2 19:12:25.979224 systemd[1]: run-containerd-runc-k8s.io-7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d-runc.N6StpE.mount: Deactivated successfully. Oct 2 19:12:25.979421 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d-rootfs.mount: Deactivated successfully. Oct 2 19:12:28.048668 kubelet[2646]: E1002 19:12:28.048631 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:28.170712 kubelet[2646]: W1002 19:12:28.170667 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda86d02f3_7b70_43d8_8dd7_918ad9405292.slice/cri-containerd-7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d.scope WatchSource:0}: task 7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d not found: not found Oct 2 19:12:33.050303 kubelet[2646]: E1002 19:12:33.050253 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:37.962385 kubelet[2646]: E1002 19:12:37.962351 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:38.051318 kubelet[2646]: E1002 19:12:38.051279 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:43.052529 kubelet[2646]: E1002 19:12:43.052492 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:48.053979 kubelet[2646]: E1002 19:12:48.053948 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:50.963996 env[1638]: time="2023-10-02T19:12:50.963952062Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:12:50.985688 env[1638]: time="2023-10-02T19:12:50.985642638Z" level=info msg="CreateContainer within sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\"" Oct 2 19:12:50.986694 env[1638]: time="2023-10-02T19:12:50.986664601Z" level=info msg="StartContainer for \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\"" Oct 2 19:12:51.020648 systemd[1]: Started cri-containerd-b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf.scope. Oct 2 19:12:51.038243 systemd[1]: cri-containerd-b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf.scope: Deactivated successfully. Oct 2 19:12:51.045284 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf-rootfs.mount: Deactivated successfully. Oct 2 19:12:51.065932 env[1638]: time="2023-10-02T19:12:51.065868196Z" level=info msg="shim disconnected" id=b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf Oct 2 19:12:51.065932 env[1638]: time="2023-10-02T19:12:51.065931715Z" level=warning msg="cleaning up after shim disconnected" id=b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf namespace=k8s.io Oct 2 19:12:51.066362 env[1638]: time="2023-10-02T19:12:51.065943962Z" level=info msg="cleaning up dead shim" Oct 2 19:12:51.075732 env[1638]: time="2023-10-02T19:12:51.075673025Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:12:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4135 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:12:51Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:12:51.076060 env[1638]: time="2023-10-02T19:12:51.075979791Z" level=error msg="copy shim log" error="read /proc/self/fd/32: file already closed" Oct 2 19:12:51.076323 env[1638]: time="2023-10-02T19:12:51.076287059Z" level=error msg="Failed to pipe stderr of container \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\"" error="reading from a closed fifo" Oct 2 19:12:51.076865 env[1638]: time="2023-10-02T19:12:51.076822543Z" level=error msg="Failed to pipe stdout of container \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\"" error="reading from a closed fifo" Oct 2 19:12:51.081750 env[1638]: time="2023-10-02T19:12:51.081689245Z" level=error msg="StartContainer for \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:12:51.082048 kubelet[2646]: E1002 19:12:51.082016 2646 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf" Oct 2 19:12:51.082438 kubelet[2646]: E1002 19:12:51.082155 2646 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:12:51.082438 kubelet[2646]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:12:51.082438 kubelet[2646]: rm /hostbin/cilium-mount Oct 2 19:12:51.082438 kubelet[2646]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7lnvh,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:12:51.082438 kubelet[2646]: E1002 19:12:51.082204 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:51.920420 kubelet[2646]: I1002 19:12:51.920380 2646 scope.go:115] "RemoveContainer" containerID="7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d" Oct 2 19:12:51.921117 kubelet[2646]: I1002 19:12:51.921093 2646 scope.go:115] "RemoveContainer" containerID="7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d" Oct 2 19:12:51.922645 env[1638]: time="2023-10-02T19:12:51.922610094Z" level=info msg="RemoveContainer for \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\"" Oct 2 19:12:51.923457 env[1638]: time="2023-10-02T19:12:51.923431096Z" level=info msg="RemoveContainer for \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\"" Oct 2 19:12:51.923709 env[1638]: time="2023-10-02T19:12:51.923666836Z" level=error msg="RemoveContainer for \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\" failed" error="failed to set removing state for container \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\": container is already in removing state" Oct 2 19:12:51.924695 kubelet[2646]: E1002 19:12:51.923945 2646 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\": container is already in removing state" containerID="7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d" Oct 2 19:12:51.924695 kubelet[2646]: E1002 19:12:51.924276 2646 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d": container is already in removing state; Skipping pod "cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)" Oct 2 19:12:51.924970 kubelet[2646]: E1002 19:12:51.924958 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:12:51.929205 env[1638]: time="2023-10-02T19:12:51.929144214Z" level=info msg="RemoveContainer for \"7fb95e0e0ad08ad2e5dd9ee04d305fa78c038755909213a12b9ad2518fd41e3d\" returns successfully" Oct 2 19:12:53.055522 kubelet[2646]: E1002 19:12:53.055481 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:12:54.171448 kubelet[2646]: W1002 19:12:54.171399 2646 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poda86d02f3_7b70_43d8_8dd7_918ad9405292.slice/cri-containerd-b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf.scope WatchSource:0}: task b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf not found: not found Oct 2 19:12:58.057043 kubelet[2646]: E1002 19:12:58.057007 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:02.454000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:02.456395 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:13:02.456480 kernel: audit: type=1400 audit(1696273982.454:1392): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:02.454000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0007ad460 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:02.488715 kernel: audit: type=1300 audit(1696273982.454:1392): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0007ad460 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:02.488888 kernel: audit: type=1327 audit(1696273982.454:1392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:02.454000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:02.457000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:02.506600 kernel: audit: type=1400 audit(1696273982.457:1393): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:02.506750 kernel: audit: type=1300 audit(1696273982.457:1393): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00104ee10 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:02.457000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00104ee10 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:02.457000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:02.525502 kernel: audit: type=1327 audit(1696273982.457:1393): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:03.058409 kubelet[2646]: E1002 19:13:03.058342 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:04.280000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.280000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00ab7fb20 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:13:04.294578 kernel: audit: type=1400 audit(1696273984.280:1394): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.294716 kernel: audit: type=1300 audit(1696273984.280:1394): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00ab7fb20 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:13:04.294754 kernel: audit: type=1327 audit(1696273984.280:1394): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:13:04.280000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:13:04.282000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.309837 kernel: audit: type=1400 audit(1696273984.282:1395): avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.282000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00d781ce0 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:13:04.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:13:04.282000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.282000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008307770 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:13:04.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:13:04.289000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.289000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00d781d10 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:13:04.289000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:13:04.306000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.306000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00d781d40 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:13:04.306000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:13:04.308000 audit[2512]: AVC avc: denied { watch } for pid=2512 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:04.308000 audit[2512]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00ab7fd00 a2=fc6 a3=0 items=0 ppid=2356 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c587 key=(null) Oct 2 19:13:04.308000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313232002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:13:05.962528 kubelet[2646]: E1002 19:13:05.962490 2646 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-rcdxh_kube-system(a86d02f3-7b70-43d8-8dd7-918ad9405292)\"" pod="kube-system/cilium-rcdxh" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 Oct 2 19:13:08.059506 kubelet[2646]: E1002 19:13:08.059470 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:11.486018 env[1638]: time="2023-10-02T19:13:11.485964440Z" level=info msg="StopPodSandbox for \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\"" Oct 2 19:13:11.486608 env[1638]: time="2023-10-02T19:13:11.486569185Z" level=info msg="Container to stop \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:13:11.489658 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a-shm.mount: Deactivated successfully. Oct 2 19:13:11.505539 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:13:11.505655 kernel: audit: type=1334 audit(1696273991.503:1400): prog-id=131 op=UNLOAD Oct 2 19:13:11.503000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:13:11.503449 systemd[1]: cri-containerd-563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a.scope: Deactivated successfully. Oct 2 19:13:11.508000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:13:11.515024 kernel: audit: type=1334 audit(1696273991.508:1401): prog-id=134 op=UNLOAD Oct 2 19:13:11.562965 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a-rootfs.mount: Deactivated successfully. Oct 2 19:13:11.592618 env[1638]: time="2023-10-02T19:13:11.592563804Z" level=info msg="shim disconnected" id=563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a Oct 2 19:13:11.593003 env[1638]: time="2023-10-02T19:13:11.592967368Z" level=warning msg="cleaning up after shim disconnected" id=563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a namespace=k8s.io Oct 2 19:13:11.593120 env[1638]: time="2023-10-02T19:13:11.593104114Z" level=info msg="cleaning up dead shim" Oct 2 19:13:11.617924 env[1638]: time="2023-10-02T19:13:11.617877142Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4171 runtime=io.containerd.runc.v2\n" Oct 2 19:13:11.618687 env[1638]: time="2023-10-02T19:13:11.618651037Z" level=info msg="TearDown network for sandbox \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" successfully" Oct 2 19:13:11.618901 env[1638]: time="2023-10-02T19:13:11.618877899Z" level=info msg="StopPodSandbox for \"563b747b7a641c388848383afbb521591c7dee8ab5e134257f4106e268122b9a\" returns successfully" Oct 2 19:13:11.708888 sshd[3937]: pam_unix(sshd:session): session closed for user core Oct 2 19:13:11.710000 audit[3937]: USER_END pid=3937 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:11.718791 kernel: audit: type=1106 audit(1696273991.710:1402): pid=3937 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:11.717000 audit[3937]: CRED_DISP pid=3937 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:11.720170 systemd[1]: sshd@29-172.31.27.122:22-139.178.89.65:59212.service: Deactivated successfully. Oct 2 19:13:11.721172 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:13:11.721373 systemd[1]: session-30.scope: Consumed 1.045s CPU time. Oct 2 19:13:11.726251 systemd-logind[1626]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:13:11.727024 kernel: audit: type=1104 audit(1696273991.717:1403): pid=3937 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:13:11.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.27.122:22-139.178.89.65:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:11.733044 systemd-logind[1626]: Removed session 30. Oct 2 19:13:11.733837 kernel: audit: type=1131 audit(1696273991.719:1404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.27.122:22-139.178.89.65:59212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:13:11.768480 kubelet[2646]: I1002 19:13:11.768351 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-ipsec-secrets\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.768480 kubelet[2646]: I1002 19:13:11.768405 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-etc-cni-netd\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.768480 kubelet[2646]: I1002 19:13:11.768429 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-lib-modules\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.768480 kubelet[2646]: I1002 19:13:11.768452 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-hostproc\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.768480 kubelet[2646]: I1002 19:13:11.768480 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-xtables-lock\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768509 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-hubble-tls\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768536 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7lnvh\" (UniqueName: \"kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-kube-api-access-7lnvh\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768562 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-kernel\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768593 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-cgroup\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768628 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-net\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768655 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cni-path\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768684 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-config-path\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768711 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-bpf-maps\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768748 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-clustermesh-secrets\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768792 2646 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-run\") pod \"a86d02f3-7b70-43d8-8dd7-918ad9405292\" (UID: \"a86d02f3-7b70-43d8-8dd7-918ad9405292\") " Oct 2 19:13:11.769144 kubelet[2646]: I1002 19:13:11.768856 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.770963 kubelet[2646]: I1002 19:13:11.770919 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771082 kubelet[2646]: I1002 19:13:11.770995 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771082 kubelet[2646]: I1002 19:13:11.771021 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771082 kubelet[2646]: I1002 19:13:11.771059 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-hostproc" (OuterVolumeSpecName: "hostproc") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771238 kubelet[2646]: I1002 19:13:11.771079 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771352 kubelet[2646]: I1002 19:13:11.771319 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771463 kubelet[2646]: I1002 19:13:11.771446 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771568 kubelet[2646]: I1002 19:13:11.771549 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cni-path" (OuterVolumeSpecName: "cni-path") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.771843 kubelet[2646]: W1002 19:13:11.771808 2646 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/a86d02f3-7b70-43d8-8dd7-918ad9405292/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:13:11.774323 kubelet[2646]: I1002 19:13:11.774296 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:13:11.775273 kubelet[2646]: I1002 19:13:11.775244 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:13:11.778843 systemd[1]: var-lib-kubelet-pods-a86d02f3\x2d7b70\x2d43d8\x2d8dd7\x2d918ad9405292-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:13:11.783924 systemd[1]: var-lib-kubelet-pods-a86d02f3\x2d7b70\x2d43d8\x2d8dd7\x2d918ad9405292-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7lnvh.mount: Deactivated successfully. Oct 2 19:13:11.784068 systemd[1]: var-lib-kubelet-pods-a86d02f3\x2d7b70\x2d43d8\x2d8dd7\x2d918ad9405292-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:13:11.788320 systemd[1]: var-lib-kubelet-pods-a86d02f3\x2d7b70\x2d43d8\x2d8dd7\x2d918ad9405292-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:13:11.789531 kubelet[2646]: I1002 19:13:11.789489 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-kube-api-access-7lnvh" (OuterVolumeSpecName: "kube-api-access-7lnvh") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "kube-api-access-7lnvh". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:13:11.790107 kubelet[2646]: I1002 19:13:11.790077 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:13:11.790317 kubelet[2646]: I1002 19:13:11.790277 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:13:11.790433 kubelet[2646]: I1002 19:13:11.790416 2646 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "a86d02f3-7b70-43d8-8dd7-918ad9405292" (UID: "a86d02f3-7b70-43d8-8dd7-918ad9405292"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:13:11.869577 kubelet[2646]: I1002 19:13:11.869535 2646 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-kernel\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869577 kubelet[2646]: I1002 19:13:11.869575 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-cgroup\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869592 2646 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-host-proc-sys-net\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869607 2646 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cni-path\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869621 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-config-path\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869633 2646 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-bpf-maps\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869646 2646 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-clustermesh-secrets\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869659 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-run\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869674 2646 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-etc-cni-netd\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869686 2646 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-lib-modules\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869698 2646 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-hostproc\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869713 2646 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/a86d02f3-7b70-43d8-8dd7-918ad9405292-cilium-ipsec-secrets\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869727 2646 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/a86d02f3-7b70-43d8-8dd7-918ad9405292-xtables-lock\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869743 2646 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-hubble-tls\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.869861 kubelet[2646]: I1002 19:13:11.869757 2646 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-7lnvh\" (UniqueName: \"kubernetes.io/projected/a86d02f3-7b70-43d8-8dd7-918ad9405292-kube-api-access-7lnvh\") on node \"ip-172-31-27-122\" DevicePath \"\"" Oct 2 19:13:11.972036 systemd[1]: Removed slice kubepods-burstable-poda86d02f3_7b70_43d8_8dd7_918ad9405292.slice. Oct 2 19:13:11.972649 kubelet[2646]: I1002 19:13:11.972193 2646 scope.go:115] "RemoveContainer" containerID="b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf" Oct 2 19:13:11.974995 env[1638]: time="2023-10-02T19:13:11.974549127Z" level=info msg="RemoveContainer for \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\"" Oct 2 19:13:11.983792 env[1638]: time="2023-10-02T19:13:11.980503172Z" level=info msg="RemoveContainer for \"b1e65060d32e62c0143bb406d24e70f7abb640e6008532bcc9727d8edc9642bf\" returns successfully" Oct 2 19:13:13.060683 kubelet[2646]: E1002 19:13:13.060651 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:13.967468 kubelet[2646]: I1002 19:13:13.967432 2646 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=a86d02f3-7b70-43d8-8dd7-918ad9405292 path="/var/lib/kubelet/pods/a86d02f3-7b70-43d8-8dd7-918ad9405292/volumes" Oct 2 19:13:18.062241 kubelet[2646]: E1002 19:13:18.062204 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:20.000000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.000000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000caff00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:20.014273 kernel: audit: type=1400 audit(1696274000.000:1405): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.014378 kernel: audit: type=1300 audit(1696274000.000:1405): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000caff00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:20.014417 kernel: audit: type=1327 audit(1696274000.000:1405): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:20.000000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:20.014000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.025987 kernel: audit: type=1400 audit(1696274000.014:1406): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.026101 kernel: audit: type=1300 audit(1696274000.014:1406): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001fb6a00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:20.014000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001fb6a00 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:20.014000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:20.039580 kernel: audit: type=1327 audit(1696274000.014:1406): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:20.039720 kernel: audit: type=1400 audit(1696274000.015:1407): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.015000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.015000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001fb6b20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:20.056160 kernel: audit: type=1300 audit(1696274000.015:1407): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001fb6b20 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:20.056306 kernel: audit: type=1327 audit(1696274000.015:1407): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:20.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:20.013000 audit[2493]: AVC avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.070157 kernel: audit: type=1400 audit(1696274000.013:1408): avc: denied { watch } for pid=2493 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:20.013000 audit[2493]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ec0080 a2=fc6 a3=0 items=0 ppid=2338 pid=2493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:20.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:23.064031 kubelet[2646]: E1002 19:13:23.063998 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:25.757662 systemd[1]: cri-containerd-29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08.scope: Deactivated successfully. Oct 2 19:13:25.758022 systemd[1]: cri-containerd-29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08.scope: Consumed 4.431s CPU time. Oct 2 19:13:25.765239 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:13:25.765447 kernel: audit: type=1334 audit(1696274005.761:1409): prog-id=82 op=UNLOAD Oct 2 19:13:25.765527 kernel: audit: type=1334 audit(1696274005.761:1410): prog-id=110 op=UNLOAD Oct 2 19:13:25.761000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:13:25.761000 audit: BPF prog-id=110 op=UNLOAD Oct 2 19:13:25.789571 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08-rootfs.mount: Deactivated successfully. Oct 2 19:13:25.818246 env[1638]: time="2023-10-02T19:13:25.818192674Z" level=info msg="shim disconnected" id=29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08 Oct 2 19:13:25.818246 env[1638]: time="2023-10-02T19:13:25.818245169Z" level=warning msg="cleaning up after shim disconnected" id=29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08 namespace=k8s.io Oct 2 19:13:25.818918 env[1638]: time="2023-10-02T19:13:25.818256835Z" level=info msg="cleaning up dead shim" Oct 2 19:13:25.829597 env[1638]: time="2023-10-02T19:13:25.829550195Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4204 runtime=io.containerd.runc.v2\n" Oct 2 19:13:25.996647 kubelet[2646]: I1002 19:13:25.996622 2646 scope.go:115] "RemoveContainer" containerID="29297cc97884c71d38b62f07192fd98f15cde5f2626b8610892c536c194d8e08" Oct 2 19:13:26.005188 env[1638]: time="2023-10-02T19:13:26.001111417Z" level=info msg="CreateContainer within sandbox \"9282603ccdb53dec32b3f7731a1d28c9b08be567a1262b57706c0599a66d77c7\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:13:26.024844 env[1638]: time="2023-10-02T19:13:26.024172790Z" level=info msg="CreateContainer within sandbox \"9282603ccdb53dec32b3f7731a1d28c9b08be567a1262b57706c0599a66d77c7\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"f2244705b2537a832bd2011d44df7f42c8fd707e3e1157dc6f4039f0dd665ec7\"" Oct 2 19:13:26.025492 env[1638]: time="2023-10-02T19:13:26.025459731Z" level=info msg="StartContainer for \"f2244705b2537a832bd2011d44df7f42c8fd707e3e1157dc6f4039f0dd665ec7\"" Oct 2 19:13:26.060241 systemd[1]: Started cri-containerd-f2244705b2537a832bd2011d44df7f42c8fd707e3e1157dc6f4039f0dd665ec7.scope. Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095791 kernel: audit: type=1400 audit(1696274006.089:1411): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.106164 kernel: audit: type=1400 audit(1696274006.089:1412): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.106289 kernel: audit: type=1400 audit(1696274006.089:1413): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.111169 kernel: audit: type=1400 audit(1696274006.089:1414): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.116267 kernel: audit: type=1400 audit(1696274006.089:1415): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.121082 kernel: audit: type=1400 audit(1696274006.089:1416): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.126430 kernel: audit: type=1400 audit(1696274006.089:1417): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit: BPF prog-id=135 op=LOAD Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.133831 kernel: audit: type=1400 audit(1696274006.089:1418): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2338 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:26.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323434373035623235333761383332626432303131643434646637 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=2338 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:26.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323434373035623235333761383332626432303131643434646637 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.094000 audit: BPF prog-id=136 op=LOAD Oct 2 19:13:26.094000 audit[4225]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c000282370 items=0 ppid=2338 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:26.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323434373035623235333761383332626432303131643434646637 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit: BPF prog-id=137 op=LOAD Oct 2 19:13:26.095000 audit[4225]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0002823b8 items=0 ppid=2338 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:26.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323434373035623235333761383332626432303131643434646637 Oct 2 19:13:26.095000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:13:26.095000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { perfmon } for pid=4225 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit[4225]: AVC avc: denied { bpf } for pid=4225 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:26.095000 audit: BPF prog-id=138 op=LOAD Oct 2 19:13:26.095000 audit[4225]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0002827c8 items=0 ppid=2338 pid=4225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:26.095000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323434373035623235333761383332626432303131643434646637 Oct 2 19:13:26.161540 env[1638]: time="2023-10-02T19:13:26.161478572Z" level=info msg="StartContainer for \"f2244705b2537a832bd2011d44df7f42c8fd707e3e1157dc6f4039f0dd665ec7\" returns successfully" Oct 2 19:13:26.795015 systemd[1]: run-containerd-runc-k8s.io-f2244705b2537a832bd2011d44df7f42c8fd707e3e1157dc6f4039f0dd665ec7-runc.G8I6dQ.mount: Deactivated successfully. Oct 2 19:13:27.180000 audit[4236]: AVC avc: denied { watch } for pid=4236 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:27.180000 audit[4236]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008d0150 a2=fc6 a3=0 items=0 ppid=2338 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:27.180000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:27.181000 audit[4236]: AVC avc: denied { watch } for pid=4236 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:13:27.181000 audit[4236]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003b5680 a2=fc6 a3=0 items=0 ppid=2338 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c775,c943 key=(null) Oct 2 19:13:27.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:13:28.065934 kubelet[2646]: E1002 19:13:28.065879 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:30.731468 systemd[1]: cri-containerd-d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6.scope: Deactivated successfully. Oct 2 19:13:30.731810 systemd[1]: cri-containerd-d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6.scope: Consumed 2.268s CPU time. Oct 2 19:13:30.734000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:13:30.734000 audit: BPF prog-id=108 op=UNLOAD Oct 2 19:13:30.770500 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6-rootfs.mount: Deactivated successfully. Oct 2 19:13:30.815979 env[1638]: time="2023-10-02T19:13:30.815916658Z" level=info msg="shim disconnected" id=d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6 Oct 2 19:13:30.815979 env[1638]: time="2023-10-02T19:13:30.815977692Z" level=warning msg="cleaning up after shim disconnected" id=d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6 namespace=k8s.io Oct 2 19:13:30.815979 env[1638]: time="2023-10-02T19:13:30.815989982Z" level=info msg="cleaning up dead shim" Oct 2 19:13:30.830115 env[1638]: time="2023-10-02T19:13:30.830060899Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:13:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4265 runtime=io.containerd.runc.v2\n" Oct 2 19:13:31.027129 kubelet[2646]: I1002 19:13:31.025251 2646 scope.go:115] "RemoveContainer" containerID="d383afc3c0a89c19e025c8ee6543096779c826be5e4ac27e45f5bf98bf3c90f6" Oct 2 19:13:31.029405 env[1638]: time="2023-10-02T19:13:31.029363648Z" level=info msg="CreateContainer within sandbox \"b927a37a10bb0c163be0f519dd5d64c8459cab97c92d3ce8aff6510f48d2f2e4\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:13:31.051128 env[1638]: time="2023-10-02T19:13:31.051077197Z" level=info msg="CreateContainer within sandbox \"b927a37a10bb0c163be0f519dd5d64c8459cab97c92d3ce8aff6510f48d2f2e4\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"dea7a3a27f9cb38bbe7c525080ee531baf6816ced9e3e0211467d697b466ca95\"" Oct 2 19:13:31.052292 env[1638]: time="2023-10-02T19:13:31.052258072Z" level=info msg="StartContainer for \"dea7a3a27f9cb38bbe7c525080ee531baf6816ced9e3e0211467d697b466ca95\"" Oct 2 19:13:31.099271 systemd[1]: Started cri-containerd-dea7a3a27f9cb38bbe7c525080ee531baf6816ced9e3e0211467d697b466ca95.scope. Oct 2 19:13:31.128577 kernel: kauditd_printk_skb: 57 callbacks suppressed Oct 2 19:13:31.128704 kernel: audit: type=1400 audit(1696274011.125:1433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138691 kernel: audit: type=1400 audit(1696274011.125:1434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.152161 kernel: audit: type=1400 audit(1696274011.125:1435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.152451 kernel: audit: type=1400 audit(1696274011.125:1436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.152634 kernel: audit: type=1400 audit(1696274011.125:1437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.162062 kernel: audit: type=1400 audit(1696274011.125:1438): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.162517 kernel: audit: type=1400 audit(1696274011.125:1439): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.172604 kernel: audit: type=1400 audit(1696274011.125:1440): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.173348 kernel: audit: type=1400 audit(1696274011.125:1441): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.185497 kernel: audit: type=1400 audit(1696274011.128:1442): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.128000 audit: BPF prog-id=139 op=LOAD Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2385 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:31.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613761336132376639636233386262653763353235303830656535 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2385 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:31.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613761336132376639636233386262653763353235303830656535 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit: BPF prog-id=140 op=LOAD Oct 2 19:13:31.138000 audit[4285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024b390 items=0 ppid=2385 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:31.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613761336132376639636233386262653763353235303830656535 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.138000 audit: BPF prog-id=141 op=LOAD Oct 2 19:13:31.138000 audit[4285]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024b3d8 items=0 ppid=2385 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:31.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613761336132376639636233386262653763353235303830656535 Oct 2 19:13:31.138000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:13:31.139000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { perfmon } for pid=4285 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit[4285]: AVC avc: denied { bpf } for pid=4285 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:13:31.139000 audit: BPF prog-id=142 op=LOAD Oct 2 19:13:31.139000 audit[4285]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00024b7e8 items=0 ppid=2385 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:13:31.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465613761336132376639636233386262653763353235303830656535 Oct 2 19:13:31.260325 env[1638]: time="2023-10-02T19:13:31.260245780Z" level=info msg="StartContainer for \"dea7a3a27f9cb38bbe7c525080ee531baf6816ced9e3e0211467d697b466ca95\" returns successfully" Oct 2 19:13:31.771117 systemd[1]: run-containerd-runc-k8s.io-dea7a3a27f9cb38bbe7c525080ee531baf6816ced9e3e0211467d697b466ca95-runc.rcP3FK.mount: Deactivated successfully. Oct 2 19:13:33.067447 kubelet[2646]: E1002 19:13:33.067417 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:34.490817 kubelet[2646]: E1002 19:13:34.490786 2646 controller.go:193] "Failed to update lease" err="Put \"https://172.31.27.122:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-122?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:13:38.068924 kubelet[2646]: E1002 19:13:38.068887 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:43.070406 kubelet[2646]: E1002 19:13:43.070364 2646 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:13:44.492706 kubelet[2646]: E1002 19:13:44.492630 2646 controller.go:193] "Failed to update lease" err="Put \"https://172.31.27.122:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-122?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"