Oct 2 19:30:22.250225 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:30:22.250262 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:30:22.250278 kernel: BIOS-provided physical RAM map: Oct 2 19:30:22.250289 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:30:22.250336 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:30:22.250348 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:30:22.250365 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 19:30:22.250378 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 19:30:22.250390 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 19:30:22.250402 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:30:22.250413 kernel: NX (Execute Disable) protection: active Oct 2 19:30:22.250424 kernel: SMBIOS 2.7 present. Oct 2 19:30:22.250435 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 19:30:22.250447 kernel: Hypervisor detected: KVM Oct 2 19:30:22.250465 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:30:22.250477 kernel: kvm-clock: cpu 0, msr 6bf8a001, primary cpu clock Oct 2 19:30:22.250488 kernel: kvm-clock: using sched offset of 6258078245 cycles Oct 2 19:30:22.250500 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:30:22.250512 kernel: tsc: Detected 2499.998 MHz processor Oct 2 19:30:22.250523 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:30:22.250538 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:30:22.250549 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 19:30:22.250561 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:30:22.250574 kernel: Using GB pages for direct mapping Oct 2 19:30:22.250586 kernel: ACPI: Early table checksum verification disabled Oct 2 19:30:22.250599 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 19:30:22.250612 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 19:30:22.250624 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:30:22.250637 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 19:30:22.250653 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 19:30:22.250666 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:30:22.250694 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:30:22.250785 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 19:30:22.250797 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:30:22.250809 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 19:30:22.250821 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 19:30:22.250834 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:30:22.250851 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 19:30:22.250864 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 19:30:22.250877 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 19:30:22.250896 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 19:30:22.250909 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 19:30:22.250923 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 19:30:22.250937 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 19:30:22.250956 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 19:30:22.250970 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 19:30:22.250984 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 19:30:22.250998 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:30:22.251012 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:30:22.251026 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 19:30:22.251040 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 19:30:22.251054 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 19:30:22.251074 kernel: Zone ranges: Oct 2 19:30:22.251088 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:30:22.251196 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 19:30:22.251213 kernel: Normal empty Oct 2 19:30:22.251228 kernel: Movable zone start for each node Oct 2 19:30:22.251242 kernel: Early memory node ranges Oct 2 19:30:22.251256 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:30:22.251271 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 19:30:22.251288 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 19:30:22.251374 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:30:22.251389 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:30:22.251404 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 19:30:22.251417 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 19:30:22.251431 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:30:22.251445 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 19:30:22.251460 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:30:22.251474 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:30:22.251488 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:30:22.251506 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:30:22.251520 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:30:22.251534 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:30:22.251548 kernel: TSC deadline timer available Oct 2 19:30:22.251562 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:30:22.251576 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 19:30:22.251591 kernel: Booting paravirtualized kernel on KVM Oct 2 19:30:22.251605 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:30:22.251619 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:30:22.251637 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:30:22.251651 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:30:22.251663 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:30:22.251691 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 19:30:22.251705 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:30:22.251719 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:30:22.251733 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 19:30:22.251747 kernel: Policy zone: DMA32 Oct 2 19:30:22.251763 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:30:22.251833 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:30:22.251850 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:30:22.251865 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:30:22.251880 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:30:22.251895 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 19:30:22.251909 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:30:22.251932 kernel: Kernel/User page tables isolation: enabled Oct 2 19:30:22.251946 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:30:22.251964 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:30:22.251978 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:30:22.251991 kernel: rcu: RCU event tracing is enabled. Oct 2 19:30:22.252003 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:30:22.252015 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:30:22.252030 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:30:22.252044 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:30:22.252058 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:30:22.252072 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:30:22.252091 kernel: random: crng init done Oct 2 19:30:22.252102 kernel: Console: colour VGA+ 80x25 Oct 2 19:30:22.252117 kernel: printk: console [ttyS0] enabled Oct 2 19:30:22.252132 kernel: ACPI: Core revision 20210730 Oct 2 19:30:22.252147 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 19:30:22.252163 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:30:22.252178 kernel: x2apic enabled Oct 2 19:30:22.252193 kernel: Switched APIC routing to physical x2apic. Oct 2 19:30:22.252208 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Oct 2 19:30:22.252225 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499998) Oct 2 19:30:22.252240 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:30:22.252254 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:30:22.252269 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:30:22.252325 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:30:22.252347 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:30:22.252361 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:30:22.252424 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:30:22.252441 kernel: RETBleed: Vulnerable Oct 2 19:30:22.252456 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:30:22.252470 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:30:22.252485 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:30:22.252553 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:30:22.252568 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:30:22.252587 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:30:22.252602 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:30:22.252617 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 19:30:22.252632 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 19:30:22.252647 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:30:22.252664 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:30:22.252695 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:30:22.252707 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 19:30:22.252718 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:30:22.252730 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 19:30:22.252742 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 19:30:22.252755 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 19:30:22.252769 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 19:30:22.252781 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 19:30:22.252793 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 19:30:22.252805 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 19:30:22.252817 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:30:22.252833 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:30:22.252896 kernel: LSM: Security Framework initializing Oct 2 19:30:22.252914 kernel: SELinux: Initializing. Oct 2 19:30:22.252930 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:30:22.252944 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:30:22.252958 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:30:22.252972 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:30:22.252986 kernel: signal: max sigframe size: 3632 Oct 2 19:30:22.253000 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:30:22.253014 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:30:22.253031 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:30:22.253046 kernel: x86: Booting SMP configuration: Oct 2 19:30:22.253060 kernel: .... node #0, CPUs: #1 Oct 2 19:30:22.253074 kernel: kvm-clock: cpu 1, msr 6bf8a041, secondary cpu clock Oct 2 19:30:22.253087 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 19:30:22.253102 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 19:30:22.253116 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:30:22.253129 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:30:22.253143 kernel: smpboot: Max logical packages: 1 Oct 2 19:30:22.253159 kernel: smpboot: Total of 2 processors activated (9999.99 BogoMIPS) Oct 2 19:30:22.253174 kernel: devtmpfs: initialized Oct 2 19:30:22.253186 kernel: x86/mm: Memory block size: 128MB Oct 2 19:30:22.253200 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:30:22.253215 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:30:22.253230 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:30:22.253244 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:30:22.253257 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:30:22.253271 kernel: audit: type=2000 audit(1696275021.172:1): state=initialized audit_enabled=0 res=1 Oct 2 19:30:22.253289 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:30:22.253396 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:30:22.253413 kernel: cpuidle: using governor menu Oct 2 19:30:22.253428 kernel: ACPI: bus type PCI registered Oct 2 19:30:22.253440 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:30:22.253452 kernel: dca service started, version 1.12.1 Oct 2 19:30:22.253464 kernel: PCI: Using configuration type 1 for base access Oct 2 19:30:22.253477 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:30:22.253490 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:30:22.253506 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:30:22.253518 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:30:22.253531 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:30:22.253544 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:30:22.253556 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:30:22.253569 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:30:22.253582 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:30:22.253594 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:30:22.253607 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 19:30:22.253622 kernel: ACPI: Interpreter enabled Oct 2 19:30:22.253634 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:30:22.253647 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:30:22.253660 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:30:22.253713 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 19:30:22.253726 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:30:22.253918 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:30:22.254125 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:30:22.254152 kernel: acpiphp: Slot [3] registered Oct 2 19:30:22.254169 kernel: acpiphp: Slot [4] registered Oct 2 19:30:22.254186 kernel: acpiphp: Slot [5] registered Oct 2 19:30:22.254201 kernel: acpiphp: Slot [6] registered Oct 2 19:30:22.254218 kernel: acpiphp: Slot [7] registered Oct 2 19:30:22.254234 kernel: acpiphp: Slot [8] registered Oct 2 19:30:22.254250 kernel: acpiphp: Slot [9] registered Oct 2 19:30:22.254265 kernel: acpiphp: Slot [10] registered Oct 2 19:30:22.254279 kernel: acpiphp: Slot [11] registered Oct 2 19:30:22.254346 kernel: acpiphp: Slot [12] registered Oct 2 19:30:22.254364 kernel: acpiphp: Slot [13] registered Oct 2 19:30:22.254379 kernel: acpiphp: Slot [14] registered Oct 2 19:30:22.254394 kernel: acpiphp: Slot [15] registered Oct 2 19:30:22.254409 kernel: acpiphp: Slot [16] registered Oct 2 19:30:22.254424 kernel: acpiphp: Slot [17] registered Oct 2 19:30:22.254439 kernel: acpiphp: Slot [18] registered Oct 2 19:30:22.254453 kernel: acpiphp: Slot [19] registered Oct 2 19:30:22.254468 kernel: acpiphp: Slot [20] registered Oct 2 19:30:22.254486 kernel: acpiphp: Slot [21] registered Oct 2 19:30:22.254501 kernel: acpiphp: Slot [22] registered Oct 2 19:30:22.254515 kernel: acpiphp: Slot [23] registered Oct 2 19:30:22.254531 kernel: acpiphp: Slot [24] registered Oct 2 19:30:22.254547 kernel: acpiphp: Slot [25] registered Oct 2 19:30:22.254562 kernel: acpiphp: Slot [26] registered Oct 2 19:30:22.254578 kernel: acpiphp: Slot [27] registered Oct 2 19:30:22.254592 kernel: acpiphp: Slot [28] registered Oct 2 19:30:22.254607 kernel: acpiphp: Slot [29] registered Oct 2 19:30:22.254622 kernel: acpiphp: Slot [30] registered Oct 2 19:30:22.254640 kernel: acpiphp: Slot [31] registered Oct 2 19:30:22.254655 kernel: PCI host bridge to bus 0000:00 Oct 2 19:30:22.254931 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:30:22.255118 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:30:22.255241 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:30:22.255470 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:30:22.255593 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:30:22.255754 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:30:22.255898 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:30:22.256051 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 19:30:22.256243 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 19:30:22.256422 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 19:30:22.256593 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 19:30:22.256733 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 19:30:22.256860 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 19:30:22.256977 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 19:30:22.257094 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 19:30:22.257271 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 19:30:22.257437 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 19:30:22.257623 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 19:30:22.257752 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 19:30:22.257874 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:30:22.258075 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:30:22.258395 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 19:30:22.258531 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:30:22.258649 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 19:30:22.258666 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:30:22.258696 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:30:22.258709 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:30:22.258722 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:30:22.258929 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:30:22.258946 kernel: iommu: Default domain type: Translated Oct 2 19:30:22.258960 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:30:22.259100 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 19:30:22.260794 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:30:22.260943 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 19:30:22.260968 kernel: vgaarb: loaded Oct 2 19:30:22.260985 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:30:22.261002 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:30:22.261017 kernel: PTP clock support registered Oct 2 19:30:22.261032 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:30:22.261048 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:30:22.261063 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:30:22.261078 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 19:30:22.261158 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 19:30:22.261174 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 19:30:22.261189 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:30:22.261203 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:30:22.261219 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:30:22.261233 kernel: pnp: PnP ACPI init Oct 2 19:30:22.261248 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:30:22.261264 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:30:22.261280 kernel: NET: Registered PF_INET protocol family Oct 2 19:30:22.261298 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:30:22.261532 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:30:22.261550 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:30:22.261566 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:30:22.261607 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:30:22.261621 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:30:22.261637 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:30:22.261652 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:30:22.261701 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:30:22.261721 kernel: NET: Registered PF_XDP protocol family Oct 2 19:30:22.261925 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:30:22.262132 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:30:22.262645 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:30:22.262794 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:30:22.262930 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:30:22.263058 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:30:22.263082 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:30:22.263098 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:30:22.263113 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Oct 2 19:30:22.263128 kernel: clocksource: Switched to clocksource tsc Oct 2 19:30:22.263143 kernel: Initialise system trusted keyrings Oct 2 19:30:22.263161 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:30:22.263174 kernel: Key type asymmetric registered Oct 2 19:30:22.263190 kernel: Asymmetric key parser 'x509' registered Oct 2 19:30:22.263205 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:30:22.263225 kernel: io scheduler mq-deadline registered Oct 2 19:30:22.263240 kernel: io scheduler kyber registered Oct 2 19:30:22.263255 kernel: io scheduler bfq registered Oct 2 19:30:22.263272 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:30:22.263288 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:30:22.265629 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:30:22.265657 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:30:22.265684 kernel: i8042: Warning: Keylock active Oct 2 19:30:22.265700 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:30:22.265722 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:30:22.265915 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 19:30:22.266042 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 19:30:22.266151 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T19:30:21 UTC (1696275021) Oct 2 19:30:22.266260 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 19:30:22.266276 kernel: intel_pstate: CPU model not supported Oct 2 19:30:22.266291 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:30:22.266305 kernel: Segment Routing with IPv6 Oct 2 19:30:22.266323 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:30:22.266337 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:30:22.266350 kernel: Key type dns_resolver registered Oct 2 19:30:22.266364 kernel: IPI shorthand broadcast: enabled Oct 2 19:30:22.266378 kernel: sched_clock: Marking stable (406001543, 295054031)->(861425852, -160370278) Oct 2 19:30:22.266392 kernel: registered taskstats version 1 Oct 2 19:30:22.266406 kernel: Loading compiled-in X.509 certificates Oct 2 19:30:22.266420 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:30:22.266433 kernel: Key type .fscrypt registered Oct 2 19:30:22.266449 kernel: Key type fscrypt-provisioning registered Oct 2 19:30:22.266463 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:30:22.266478 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:30:22.266493 kernel: ima: No architecture policies found Oct 2 19:30:22.266507 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:30:22.266521 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:30:22.266535 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:30:22.266550 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:30:22.266564 kernel: Run /init as init process Oct 2 19:30:22.266589 kernel: with arguments: Oct 2 19:30:22.266603 kernel: /init Oct 2 19:30:22.266617 kernel: with environment: Oct 2 19:30:22.266630 kernel: HOME=/ Oct 2 19:30:22.266644 kernel: TERM=linux Oct 2 19:30:22.266658 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:30:22.266690 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:30:22.266711 systemd[1]: Detected virtualization amazon. Oct 2 19:30:22.266727 systemd[1]: Detected architecture x86-64. Oct 2 19:30:22.266741 systemd[1]: Running in initrd. Oct 2 19:30:22.266756 systemd[1]: No hostname configured, using default hostname. Oct 2 19:30:22.266771 systemd[1]: Hostname set to . Oct 2 19:30:22.266811 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:30:22.266829 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:30:22.266845 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:30:22.266861 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:30:22.266876 systemd[1]: Reached target cryptsetup.target. Oct 2 19:30:22.266891 systemd[1]: Reached target paths.target. Oct 2 19:30:22.266907 systemd[1]: Reached target slices.target. Oct 2 19:30:22.266923 systemd[1]: Reached target swap.target. Oct 2 19:30:22.266937 systemd[1]: Reached target timers.target. Oct 2 19:30:22.266956 systemd[1]: Listening on iscsid.socket. Oct 2 19:30:22.266972 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:30:22.266989 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:30:22.267006 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:30:22.267024 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:30:22.267040 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:30:22.267056 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:30:22.267072 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:30:22.267088 systemd[1]: Reached target sockets.target. Oct 2 19:30:22.267107 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:30:22.267123 systemd[1]: Finished network-cleanup.service. Oct 2 19:30:22.267140 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:30:22.267157 systemd[1]: Starting systemd-journald.service... Oct 2 19:30:22.267174 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:30:22.267190 systemd[1]: Starting systemd-resolved.service... Oct 2 19:30:22.267205 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:30:22.267228 systemd-journald[185]: Journal started Oct 2 19:30:22.267312 systemd-journald[185]: Runtime Journal (/run/log/journal/ec22e1471e923f68cef7ec2b24592fbb) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:30:22.272703 systemd[1]: Started systemd-journald.service. Oct 2 19:30:22.307122 systemd-resolved[187]: Positive Trust Anchors: Oct 2 19:30:22.440573 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:30:22.440604 kernel: Bridge firewalling registered Oct 2 19:30:22.440617 kernel: SCSI subsystem initialized Oct 2 19:30:22.440629 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:30:22.440640 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:30:22.440655 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:30:22.440683 kernel: audit: type=1130 audit(1696275022.433:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.307404 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:30:22.307456 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:30:22.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.311164 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 19:30:22.469302 kernel: audit: type=1130 audit(1696275022.439:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.475994 kernel: audit: type=1130 audit(1696275022.443:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.476020 kernel: audit: type=1130 audit(1696275022.466:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.476037 kernel: audit: type=1130 audit(1696275022.475:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.466000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.313869 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 19:30:22.358438 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 19:30:22.491629 kernel: audit: type=1130 audit(1696275022.484:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.398579 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 19:30:22.434509 systemd[1]: Started systemd-resolved.service. Oct 2 19:30:22.440834 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:30:22.444521 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:30:22.467504 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:30:22.476819 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:30:22.485275 systemd[1]: Reached target nss-lookup.target. Oct 2 19:30:22.497756 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:30:22.499975 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:30:22.501148 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:30:22.527842 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:30:22.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.534781 kernel: audit: type=1130 audit(1696275022.527:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.539096 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:30:22.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.545692 kernel: audit: type=1130 audit(1696275022.538:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.547448 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:30:22.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.553200 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:30:22.561284 kernel: audit: type=1130 audit(1696275022.548:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.569844 dracut-cmdline[205]: dracut-dracut-053 Oct 2 19:30:22.574494 dracut-cmdline[205]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:30:22.682778 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:30:22.713705 kernel: iscsi: registered transport (tcp) Oct 2 19:30:22.751414 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:30:22.751517 kernel: QLogic iSCSI HBA Driver Oct 2 19:30:22.804542 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:30:22.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:22.807624 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:30:22.869736 kernel: raid6: avx512x4 gen() 13037 MB/s Oct 2 19:30:22.886705 kernel: raid6: avx512x4 xor() 5947 MB/s Oct 2 19:30:22.903716 kernel: raid6: avx512x2 gen() 14226 MB/s Oct 2 19:30:22.921702 kernel: raid6: avx512x2 xor() 20312 MB/s Oct 2 19:30:22.938717 kernel: raid6: avx512x1 gen() 16028 MB/s Oct 2 19:30:22.956703 kernel: raid6: avx512x1 xor() 19685 MB/s Oct 2 19:30:22.973693 kernel: raid6: avx2x4 gen() 13166 MB/s Oct 2 19:30:22.990705 kernel: raid6: avx2x4 xor() 6881 MB/s Oct 2 19:30:23.008714 kernel: raid6: avx2x2 gen() 8194 MB/s Oct 2 19:30:23.028719 kernel: raid6: avx2x2 xor() 9479 MB/s Oct 2 19:30:23.046722 kernel: raid6: avx2x1 gen() 7680 MB/s Oct 2 19:30:23.065718 kernel: raid6: avx2x1 xor() 6780 MB/s Oct 2 19:30:23.084703 kernel: raid6: sse2x4 gen() 4741 MB/s Oct 2 19:30:23.102731 kernel: raid6: sse2x4 xor() 3752 MB/s Oct 2 19:30:23.120713 kernel: raid6: sse2x2 gen() 6363 MB/s Oct 2 19:30:23.138735 kernel: raid6: sse2x2 xor() 3473 MB/s Oct 2 19:30:23.157729 kernel: raid6: sse2x1 gen() 4986 MB/s Oct 2 19:30:23.175764 kernel: raid6: sse2x1 xor() 4161 MB/s Oct 2 19:30:23.175837 kernel: raid6: using algorithm avx512x1 gen() 16028 MB/s Oct 2 19:30:23.175857 kernel: raid6: .... xor() 19685 MB/s, rmw enabled Oct 2 19:30:23.177345 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:30:23.191694 kernel: xor: automatically using best checksumming function avx Oct 2 19:30:23.305701 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:30:23.319237 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:30:23.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:23.320000 audit: BPF prog-id=7 op=LOAD Oct 2 19:30:23.320000 audit: BPF prog-id=8 op=LOAD Oct 2 19:30:23.322299 systemd[1]: Starting systemd-udevd.service... Oct 2 19:30:23.340492 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 19:30:23.352231 systemd[1]: Started systemd-udevd.service. Oct 2 19:30:23.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:23.356894 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:30:23.387995 dracut-pre-trigger[387]: rd.md=0: removing MD RAID activation Oct 2 19:30:23.441803 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:30:23.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:23.445544 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:30:23.519862 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:30:23.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:23.603694 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:30:23.630301 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:30:23.630373 kernel: AES CTR mode by8 optimization enabled Oct 2 19:30:23.658704 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:30:23.658949 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:30:23.661559 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 19:30:23.664696 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:75:08:6a:66:eb Oct 2 19:30:23.666058 (udev-worker)[439]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:30:23.840789 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:30:23.841109 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:30:23.841131 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:30:23.841263 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:30:23.841280 kernel: GPT:9289727 != 16777215 Oct 2 19:30:23.841297 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:30:23.841313 kernel: GPT:9289727 != 16777215 Oct 2 19:30:23.841328 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:30:23.841344 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:30:23.841360 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (429) Oct 2 19:30:23.786435 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:30:23.852591 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:30:23.890371 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:30:23.893409 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:30:23.899656 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:30:23.900898 systemd[1]: Starting disk-uuid.service... Oct 2 19:30:23.909958 disk-uuid[583]: Primary Header is updated. Oct 2 19:30:23.909958 disk-uuid[583]: Secondary Entries is updated. Oct 2 19:30:23.909958 disk-uuid[583]: Secondary Header is updated. Oct 2 19:30:23.914016 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:30:23.921727 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:30:23.927692 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:30:24.926571 disk-uuid[584]: The operation has completed successfully. Oct 2 19:30:24.928153 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:30:25.077097 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:30:25.077210 systemd[1]: Finished disk-uuid.service. Oct 2 19:30:25.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.082482 systemd[1]: Starting verity-setup.service... Oct 2 19:30:25.118723 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:30:25.225374 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:30:25.228123 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:30:25.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.231693 systemd[1]: Finished verity-setup.service. Oct 2 19:30:25.404841 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:30:25.405469 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:30:25.405782 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:30:25.407055 systemd[1]: Starting ignition-setup.service... Oct 2 19:30:25.413503 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:30:25.433817 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:30:25.434159 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:30:25.434216 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:30:25.461991 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:30:25.481441 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:30:25.502953 systemd[1]: Finished ignition-setup.service. Oct 2 19:30:25.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.505681 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:30:25.542503 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:30:25.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.544000 audit: BPF prog-id=9 op=LOAD Oct 2 19:30:25.551890 systemd[1]: Starting systemd-networkd.service... Oct 2 19:30:25.608011 systemd-networkd[1096]: lo: Link UP Oct 2 19:30:25.608022 systemd-networkd[1096]: lo: Gained carrier Oct 2 19:30:25.610044 systemd-networkd[1096]: Enumeration completed Oct 2 19:30:25.610325 systemd-networkd[1096]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:30:25.612545 systemd[1]: Started systemd-networkd.service. Oct 2 19:30:25.619879 systemd[1]: Reached target network.target. Oct 2 19:30:25.622614 systemd[1]: Starting iscsiuio.service... Oct 2 19:30:25.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.626755 systemd-networkd[1096]: eth0: Link UP Oct 2 19:30:25.626884 systemd-networkd[1096]: eth0: Gained carrier Oct 2 19:30:25.638763 systemd[1]: Started iscsiuio.service. Oct 2 19:30:25.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.641550 systemd[1]: Starting iscsid.service... Oct 2 19:30:25.651040 iscsid[1101]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:30:25.651040 iscsid[1101]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:30:25.651040 iscsid[1101]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:30:25.651040 iscsid[1101]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:30:25.651040 iscsid[1101]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:30:25.651040 iscsid[1101]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:30:25.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.655648 systemd[1]: Started iscsid.service. Oct 2 19:30:25.662517 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:30:25.681847 systemd-networkd[1096]: eth0: DHCPv4 address 172.31.28.204/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:30:25.682318 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:30:25.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:25.687386 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:30:25.689004 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:30:25.690755 systemd[1]: Reached target remote-fs.target. Oct 2 19:30:25.700780 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:30:25.712399 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:30:25.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.320276 ignition[1061]: Ignition 2.14.0 Oct 2 19:30:26.320291 ignition[1061]: Stage: fetch-offline Oct 2 19:30:26.320528 ignition[1061]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:30:26.320573 ignition[1061]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:30:26.339254 ignition[1061]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:30:26.339750 ignition[1061]: Ignition finished successfully Oct 2 19:30:26.344581 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:30:26.356403 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 19:30:26.356437 kernel: audit: type=1130 audit(1696275026.345:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.347799 systemd[1]: Starting ignition-fetch.service... Oct 2 19:30:26.360585 ignition[1120]: Ignition 2.14.0 Oct 2 19:30:26.360597 ignition[1120]: Stage: fetch Oct 2 19:30:26.360819 ignition[1120]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:30:26.360852 ignition[1120]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:30:26.373322 ignition[1120]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:30:26.374761 ignition[1120]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:30:26.398993 ignition[1120]: INFO : PUT result: OK Oct 2 19:30:26.421327 ignition[1120]: DEBUG : parsed url from cmdline: "" Oct 2 19:30:26.421327 ignition[1120]: INFO : no config URL provided Oct 2 19:30:26.421327 ignition[1120]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:30:26.421327 ignition[1120]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:30:26.421327 ignition[1120]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:30:26.437131 ignition[1120]: INFO : PUT result: OK Oct 2 19:30:26.437131 ignition[1120]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:30:26.437131 ignition[1120]: INFO : GET result: OK Oct 2 19:30:26.445477 ignition[1120]: DEBUG : parsing config with SHA512: 1c8420c3102f34bc47ade0fba78c281a1eff338e475f991592d6abc2948371f5f17a000bc096a2c07ec2a11b5793b75389866ce7352277ebfb078bf493ac2e63 Oct 2 19:30:26.480197 unknown[1120]: fetched base config from "system" Oct 2 19:30:26.480338 unknown[1120]: fetched base config from "system" Oct 2 19:30:26.480353 unknown[1120]: fetched user config from "aws" Oct 2 19:30:26.484557 ignition[1120]: fetch: fetch complete Oct 2 19:30:26.484571 ignition[1120]: fetch: fetch passed Oct 2 19:30:26.484631 ignition[1120]: Ignition finished successfully Oct 2 19:30:26.489947 systemd[1]: Finished ignition-fetch.service. Oct 2 19:30:26.500050 kernel: audit: type=1130 audit(1696275026.490:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.492892 systemd[1]: Starting ignition-kargs.service... Oct 2 19:30:26.512340 ignition[1126]: Ignition 2.14.0 Oct 2 19:30:26.512353 ignition[1126]: Stage: kargs Oct 2 19:30:26.512727 ignition[1126]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:30:26.512759 ignition[1126]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:30:26.523775 ignition[1126]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:30:26.525452 ignition[1126]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:30:26.527044 ignition[1126]: INFO : PUT result: OK Oct 2 19:30:26.531161 ignition[1126]: kargs: kargs passed Oct 2 19:30:26.531236 ignition[1126]: Ignition finished successfully Oct 2 19:30:26.534401 systemd[1]: Finished ignition-kargs.service. Oct 2 19:30:26.542756 kernel: audit: type=1130 audit(1696275026.534:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.543366 systemd[1]: Starting ignition-disks.service... Oct 2 19:30:26.561966 ignition[1132]: Ignition 2.14.0 Oct 2 19:30:26.561978 ignition[1132]: Stage: disks Oct 2 19:30:26.562187 ignition[1132]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:30:26.562221 ignition[1132]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:30:26.570372 ignition[1132]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:30:26.572309 ignition[1132]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:30:26.574142 ignition[1132]: INFO : PUT result: OK Oct 2 19:30:26.577628 ignition[1132]: disks: disks passed Oct 2 19:30:26.577708 ignition[1132]: Ignition finished successfully Oct 2 19:30:26.579965 systemd[1]: Finished ignition-disks.service. Oct 2 19:30:26.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.584889 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:30:26.593658 kernel: audit: type=1130 audit(1696275026.584:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.593661 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:30:26.593801 systemd[1]: Reached target local-fs.target. Oct 2 19:30:26.600775 systemd[1]: Reached target sysinit.target. Oct 2 19:30:26.601731 systemd[1]: Reached target basic.target. Oct 2 19:30:26.602782 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:30:26.646390 systemd-fsck[1140]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:30:26.651989 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:30:26.654255 systemd[1]: Mounting sysroot.mount... Oct 2 19:30:26.662845 kernel: audit: type=1130 audit(1696275026.653:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:26.676230 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:30:26.676145 systemd[1]: Mounted sysroot.mount. Oct 2 19:30:26.677458 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:30:26.689780 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:30:26.692435 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:30:26.692502 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:30:26.698179 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:30:26.705711 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:30:26.723452 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:30:26.725479 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:30:26.741701 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1157) Oct 2 19:30:26.749516 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:30:26.749573 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:30:26.749586 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:30:26.749597 initrd-setup-root[1162]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:30:26.757917 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:30:26.763626 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:30:26.770105 initrd-setup-root[1188]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:30:26.775995 initrd-setup-root[1196]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:30:26.781387 initrd-setup-root[1204]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:30:26.942831 systemd-networkd[1096]: eth0: Gained IPv6LL Oct 2 19:30:27.029259 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:30:27.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:27.030478 systemd[1]: Starting ignition-mount.service... Oct 2 19:30:27.039491 kernel: audit: type=1130 audit(1696275027.028:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:27.042034 systemd[1]: Starting sysroot-boot.service... Oct 2 19:30:27.048828 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:30:27.048955 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:30:27.086195 ignition[1223]: INFO : Ignition 2.14.0 Oct 2 19:30:27.087625 ignition[1223]: INFO : Stage: mount Oct 2 19:30:27.090273 ignition[1223]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:30:27.092567 ignition[1223]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:30:27.106709 ignition[1223]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:30:27.106709 ignition[1223]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:30:27.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:27.109767 systemd[1]: Finished sysroot-boot.service. Oct 2 19:30:27.119036 kernel: audit: type=1130 audit(1696275027.111:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:27.119064 ignition[1223]: INFO : PUT result: OK Oct 2 19:30:27.123813 ignition[1223]: INFO : mount: mount passed Oct 2 19:30:27.125138 ignition[1223]: INFO : Ignition finished successfully Oct 2 19:30:27.126938 systemd[1]: Finished ignition-mount.service. Oct 2 19:30:27.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:27.128032 systemd[1]: Starting ignition-files.service... Oct 2 19:30:27.134808 kernel: audit: type=1130 audit(1696275027.126:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:27.141585 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:30:27.196692 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1232) Oct 2 19:30:27.196749 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:30:27.199566 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:30:27.199625 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:30:27.207724 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:30:27.211500 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:30:27.225018 ignition[1251]: INFO : Ignition 2.14.0 Oct 2 19:30:27.225018 ignition[1251]: INFO : Stage: files Oct 2 19:30:27.227545 ignition[1251]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:30:27.227545 ignition[1251]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:30:27.242931 ignition[1251]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:30:27.244725 ignition[1251]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:30:27.246807 ignition[1251]: INFO : PUT result: OK Oct 2 19:30:27.251781 ignition[1251]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:30:27.258937 ignition[1251]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:30:27.258937 ignition[1251]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:30:27.287184 ignition[1251]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:30:27.290959 ignition[1251]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:30:27.296123 unknown[1251]: wrote ssh authorized keys file for user: core Oct 2 19:30:27.298908 ignition[1251]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:30:27.302358 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:30:27.304877 ignition[1251]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:30:27.458544 ignition[1251]: INFO : GET result: OK Oct 2 19:30:27.744780 ignition[1251]: DEBUG : file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:30:27.748945 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:30:27.748945 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:30:27.748945 ignition[1251]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.24.2/crictl-v1.24.2-linux-amd64.tar.gz: attempt #1 Oct 2 19:30:27.983267 ignition[1251]: INFO : GET result: OK Oct 2 19:30:28.070217 ignition[1251]: DEBUG : file matches expected sum of: 961188117863ca9af5b084e84691e372efee93ad09daf6a0422e8d75a5803f394d8968064f7ca89f14e8973766201e731241f32538cf2c8d91f0233e786302df Oct 2 19:30:28.073200 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 19:30:28.073200 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:30:28.078329 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:30:28.078329 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:30:28.078329 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:30:28.089024 ignition[1251]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3409660116" Oct 2 19:30:28.091142 ignition[1251]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3409660116": device or resource busy Oct 2 19:30:28.091142 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3409660116", trying btrfs: device or resource busy Oct 2 19:30:28.091142 ignition[1251]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3409660116" Oct 2 19:30:28.113384 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1255) Oct 2 19:30:28.113414 ignition[1251]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3409660116" Oct 2 19:30:28.113414 ignition[1251]: INFO : op(3): [started] unmounting "/mnt/oem3409660116" Oct 2 19:30:28.113414 ignition[1251]: INFO : op(3): [finished] unmounting "/mnt/oem3409660116" Oct 2 19:30:28.113414 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:30:28.120774 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:30:28.120774 ignition[1251]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:30:28.139565 systemd[1]: mnt-oem3409660116.mount: Deactivated successfully. Oct 2 19:30:28.220936 ignition[1251]: INFO : GET result: OK Oct 2 19:30:30.440445 ignition[1251]: DEBUG : file matches expected sum of: 43b8f213f1732c092e34008d5334e6622a6603f7ec5890c395ac911d50069d0dc11a81fa38436df40fc875a10fee6ee13aa285c017f1de210171065e847c99c5 Oct 2 19:30:30.444765 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:30:30.444765 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:30:30.444765 ignition[1251]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:30:30.496266 ignition[1251]: INFO : GET result: OK Oct 2 19:30:35.162270 ignition[1251]: DEBUG : file matches expected sum of: 82b36a0b83a1d48ef1f70e3ed2a263b3ce935304cdc0606d194b290217fb04f98628b0d82e200b51ccf5c05c718b2476274ae710bb143fffe28dc6bbf8407d54 Oct 2 19:30:35.166873 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:30:35.166873 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:30:35.166873 ignition[1251]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:30:35.285823 ignition[1251]: INFO : GET result: OK Oct 2 19:30:37.133232 ignition[1251]: DEBUG : file matches expected sum of: 9006cd791c99f5421c09ae8f6029fdd0ea4608909f590dea41ba4dd5c500440272e9ece21489d1f192966717987251ded5394ea1dd4c5d091b700ac1c8cfa392 Oct 2 19:30:37.137154 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:30:37.137154 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:30:37.137154 ignition[1251]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.2/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:30:37.227837 ignition[1251]: INFO : GET result: OK Oct 2 19:30:37.362656 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:30:37.365359 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:30:37.368378 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:30:37.368378 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:30:37.374634 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:30:37.379875 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:30:37.383852 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:30:37.398499 ignition[1251]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2403114494" Oct 2 19:30:37.408818 ignition[1251]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2403114494": device or resource busy Oct 2 19:30:37.408818 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2403114494", trying btrfs: device or resource busy Oct 2 19:30:37.408818 ignition[1251]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2403114494" Oct 2 19:30:37.408818 ignition[1251]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2403114494" Oct 2 19:30:37.421897 ignition[1251]: INFO : op(6): [started] unmounting "/mnt/oem2403114494" Oct 2 19:30:37.421897 ignition[1251]: INFO : op(6): [finished] unmounting "/mnt/oem2403114494" Oct 2 19:30:37.421897 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:30:37.421897 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:30:37.421897 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:30:37.436319 systemd[1]: mnt-oem2403114494.mount: Deactivated successfully. Oct 2 19:30:37.449615 ignition[1251]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4237433779" Oct 2 19:30:37.451378 ignition[1251]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4237433779": device or resource busy Oct 2 19:30:37.451378 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4237433779", trying btrfs: device or resource busy Oct 2 19:30:37.451378 ignition[1251]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4237433779" Oct 2 19:30:37.468355 ignition[1251]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4237433779" Oct 2 19:30:37.468355 ignition[1251]: INFO : op(9): [started] unmounting "/mnt/oem4237433779" Oct 2 19:30:37.468355 ignition[1251]: INFO : op(9): [finished] unmounting "/mnt/oem4237433779" Oct 2 19:30:37.468355 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:30:37.468355 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:30:37.468355 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:30:37.459988 systemd[1]: mnt-oem4237433779.mount: Deactivated successfully. Oct 2 19:30:37.489442 ignition[1251]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3941953040" Oct 2 19:30:37.491594 ignition[1251]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3941953040": device or resource busy Oct 2 19:30:37.491594 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3941953040", trying btrfs: device or resource busy Oct 2 19:30:37.491594 ignition[1251]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3941953040" Oct 2 19:30:37.500010 ignition[1251]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3941953040" Oct 2 19:30:37.504223 ignition[1251]: INFO : op(c): [started] unmounting "/mnt/oem3941953040" Oct 2 19:30:37.505885 ignition[1251]: INFO : op(c): [finished] unmounting "/mnt/oem3941953040" Oct 2 19:30:37.507290 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:30:37.510132 ignition[1251]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:30:37.510132 ignition[1251]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:30:37.514369 ignition[1251]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:30:37.514369 ignition[1251]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:30:37.520275 ignition[1251]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:30:37.520275 ignition[1251]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:30:37.520275 ignition[1251]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:30:37.520275 ignition[1251]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:30:37.520275 ignition[1251]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:30:37.520275 ignition[1251]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:30:37.537290 ignition[1251]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:30:37.537290 ignition[1251]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:30:37.537290 ignition[1251]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:30:37.537290 ignition[1251]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:30:37.537290 ignition[1251]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:30:37.537290 ignition[1251]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:30:37.537290 ignition[1251]: INFO : files: op(18): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:30:37.589778 kernel: audit: type=1130 audit(1696275037.574:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(19): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(19): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(1a): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(1a): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(1b): [started] setting preset to enabled for "nvidia.service" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(1b): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:30:37.589877 ignition[1251]: INFO : files: files passed Oct 2 19:30:37.589877 ignition[1251]: INFO : Ignition finished successfully Oct 2 19:30:37.571533 systemd[1]: Finished ignition-files.service. Oct 2 19:30:37.591219 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:30:37.601281 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:30:37.602588 systemd[1]: Starting ignition-quench.service... Oct 2 19:30:37.638280 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:30:37.638618 systemd[1]: Finished ignition-quench.service. Oct 2 19:30:37.644709 initrd-setup-root-after-ignition[1276]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:30:37.654840 kernel: audit: type=1130 audit(1696275037.643:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.654874 kernel: audit: type=1131 audit(1696275037.643:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.654926 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:30:37.662881 kernel: audit: type=1130 audit(1696275037.656:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.656605 systemd[1]: Reached target ignition-complete.target. Oct 2 19:30:37.664062 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:30:37.686255 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:30:37.686380 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:30:37.700237 kernel: audit: type=1130 audit(1696275037.688:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.700274 kernel: audit: type=1131 audit(1696275037.688:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.689027 systemd[1]: Reached target initrd-fs.target. Oct 2 19:30:37.700280 systemd[1]: Reached target initrd.target. Oct 2 19:30:37.701447 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:30:37.703002 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:30:37.719966 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:30:37.728761 kernel: audit: type=1130 audit(1696275037.721:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.726143 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:30:37.740643 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:30:37.743240 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:30:37.743462 systemd[1]: Stopped target timers.target. Oct 2 19:30:37.748514 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:30:37.750306 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:30:37.760808 kernel: audit: type=1131 audit(1696275037.753:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.760247 systemd[1]: Stopped target initrd.target. Oct 2 19:30:37.763345 systemd[1]: Stopped target basic.target. Oct 2 19:30:37.764458 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:30:37.768526 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:30:37.770572 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:30:37.773354 systemd[1]: Stopped target remote-fs.target. Oct 2 19:30:37.775525 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:30:37.779075 systemd[1]: Stopped target sysinit.target. Oct 2 19:30:37.781662 systemd[1]: Stopped target local-fs.target. Oct 2 19:30:37.784680 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:30:37.786879 systemd[1]: Stopped target swap.target. Oct 2 19:30:37.789269 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:30:37.791773 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:30:37.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.795245 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:30:37.803850 kernel: audit: type=1131 audit(1696275037.794:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.802143 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:30:37.815760 kernel: audit: type=1131 audit(1696275037.803:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.802344 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:30:37.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.804619 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:30:37.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.804863 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:30:37.816645 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:30:37.818284 systemd[1]: Stopped ignition-files.service. Oct 2 19:30:37.839620 systemd[1]: Stopping ignition-mount.service... Oct 2 19:30:37.843001 systemd[1]: Stopping iscsid.service... Oct 2 19:30:37.844717 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:30:37.847871 iscsid[1101]: iscsid shutting down. Oct 2 19:30:37.849199 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:30:37.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.854870 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:30:37.856037 ignition[1289]: INFO : Ignition 2.14.0 Oct 2 19:30:37.856037 ignition[1289]: INFO : Stage: umount Oct 2 19:30:37.859930 ignition[1289]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:30:37.859930 ignition[1289]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:30:37.866392 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:30:37.869446 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:30:37.873014 ignition[1289]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:30:37.873014 ignition[1289]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:30:37.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.877831 ignition[1289]: INFO : PUT result: OK Oct 2 19:30:37.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.877067 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:30:37.889118 ignition[1289]: INFO : umount: umount passed Oct 2 19:30:37.889118 ignition[1289]: INFO : Ignition finished successfully Oct 2 19:30:37.877241 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:30:37.890631 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:30:37.890796 systemd[1]: Stopped iscsid.service. Oct 2 19:30:37.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.896838 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:30:37.897212 systemd[1]: Stopped ignition-mount.service. Oct 2 19:30:37.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.904917 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:30:37.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.909000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.911000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.905368 systemd[1]: Stopped ignition-disks.service. Oct 2 19:30:37.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.908698 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:30:37.908772 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:30:37.909994 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:30:37.910040 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:30:37.911426 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:30:37.911471 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:30:37.918716 systemd[1]: Stopped target paths.target. Oct 2 19:30:37.931985 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:30:37.936022 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:30:37.936184 systemd[1]: Stopped target slices.target. Oct 2 19:30:37.940778 systemd[1]: Stopped target sockets.target. Oct 2 19:30:37.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.943286 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:30:37.943337 systemd[1]: Closed iscsid.socket. Oct 2 19:30:37.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.943429 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:30:37.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.943467 systemd[1]: Stopped ignition-setup.service. Oct 2 19:30:37.944611 systemd[1]: Stopping iscsiuio.service... Oct 2 19:30:37.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.946636 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:30:37.946760 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:30:37.955312 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:30:37.958238 systemd[1]: Stopped iscsiuio.service. Oct 2 19:30:37.964851 systemd[1]: Stopped target network.target. Oct 2 19:30:37.966282 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:30:37.966384 systemd[1]: Closed iscsiuio.socket. Oct 2 19:30:37.970068 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:30:37.974654 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:30:37.976399 systemd-networkd[1096]: eth0: DHCPv6 lease lost Oct 2 19:30:37.979659 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:30:37.981890 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:30:37.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.983000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:30:37.984571 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:30:37.984625 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:30:37.988458 systemd[1]: Stopping network-cleanup.service... Oct 2 19:30:37.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.989818 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:30:37.989899 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:30:37.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:37.992113 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:30:37.992173 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:30:38.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.000138 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:30:38.000453 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:30:38.003731 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:30:38.012142 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:30:38.013495 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:30:38.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.016002 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:30:38.017309 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:30:38.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.020000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:30:38.021721 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:30:38.021790 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:30:38.025152 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:30:38.025248 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:30:38.030126 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:30:38.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.030267 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:30:38.033456 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:30:38.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.033512 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:30:38.036985 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:30:38.038569 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:30:38.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.044755 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:30:38.050000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.048817 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:30:38.048961 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:30:38.051237 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:30:38.051554 systemd[1]: Stopped network-cleanup.service. Oct 2 19:30:38.085808 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:30:38.085920 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:30:38.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.352958 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:30:38.353091 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:30:38.356000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.357256 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:30:38.359450 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:30:38.359540 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:30:38.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:38.364323 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:30:38.399211 systemd[1]: Switching root. Oct 2 19:30:38.435559 systemd-journald[185]: Journal stopped Oct 2 19:30:45.546926 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 19:30:45.547010 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:30:45.547090 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:30:45.547118 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:30:45.547135 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:30:45.547153 kernel: SELinux: policy capability open_perms=1 Oct 2 19:30:45.547177 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:30:45.547199 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:30:45.547222 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:30:45.547239 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:30:45.547263 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:30:45.547281 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:30:45.547467 systemd[1]: Successfully loaded SELinux policy in 149.277ms. Oct 2 19:30:45.547514 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.239ms. Oct 2 19:30:45.547534 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:30:45.547548 systemd[1]: Detected virtualization amazon. Oct 2 19:30:45.547563 systemd[1]: Detected architecture x86-64. Oct 2 19:30:45.547575 systemd[1]: Detected first boot. Oct 2 19:30:45.547725 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:30:45.547747 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:30:45.547769 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:30:45.547796 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:30:45.547819 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:30:45.547852 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 19:30:45.547873 kernel: audit: type=1334 audit(1696275045.143:86): prog-id=12 op=LOAD Oct 2 19:30:45.547893 kernel: audit: type=1334 audit(1696275045.143:87): prog-id=3 op=UNLOAD Oct 2 19:30:45.547974 kernel: audit: type=1334 audit(1696275045.144:88): prog-id=13 op=LOAD Oct 2 19:30:45.547994 kernel: audit: type=1334 audit(1696275045.147:89): prog-id=14 op=LOAD Oct 2 19:30:45.548015 kernel: audit: type=1334 audit(1696275045.147:90): prog-id=4 op=UNLOAD Oct 2 19:30:45.548036 kernel: audit: type=1334 audit(1696275045.147:91): prog-id=5 op=UNLOAD Oct 2 19:30:45.548111 kernel: audit: type=1334 audit(1696275045.151:92): prog-id=15 op=LOAD Oct 2 19:30:45.548137 kernel: audit: type=1334 audit(1696275045.151:93): prog-id=12 op=UNLOAD Oct 2 19:30:45.548156 kernel: audit: type=1334 audit(1696275045.152:94): prog-id=16 op=LOAD Oct 2 19:30:45.548177 kernel: audit: type=1334 audit(1696275045.153:95): prog-id=17 op=LOAD Oct 2 19:30:45.548197 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:30:45.548222 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:30:45.548244 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:30:45.548266 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:30:45.548289 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:30:45.548313 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:30:45.548337 systemd[1]: Created slice system-getty.slice. Oct 2 19:30:45.548361 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:30:45.548384 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:30:45.548407 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:30:45.548429 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:30:45.548451 systemd[1]: Created slice user.slice. Oct 2 19:30:45.548474 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:30:45.548498 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:30:45.548615 systemd[1]: Set up automount boot.automount. Oct 2 19:30:45.548640 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:30:45.548730 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:30:45.548820 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:30:45.548842 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:30:45.548859 systemd[1]: Reached target integritysetup.target. Oct 2 19:30:45.548877 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:30:45.551110 systemd[1]: Reached target remote-fs.target. Oct 2 19:30:45.553782 systemd[1]: Reached target slices.target. Oct 2 19:30:45.553848 systemd[1]: Reached target swap.target. Oct 2 19:30:45.553872 systemd[1]: Reached target torcx.target. Oct 2 19:30:45.553898 systemd[1]: Reached target veritysetup.target. Oct 2 19:30:45.553919 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:30:45.553938 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:30:45.553960 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:30:45.553978 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:30:45.553996 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:30:45.554015 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:30:45.554034 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:30:45.554053 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:30:45.554281 systemd[1]: Mounting media.mount... Oct 2 19:30:45.554354 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:30:45.554376 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:30:45.554399 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:30:45.554419 systemd[1]: Mounting tmp.mount... Oct 2 19:30:45.554438 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:30:45.554456 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:30:45.554476 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:30:45.554495 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:30:45.554512 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:30:45.554532 systemd[1]: Starting modprobe@drm.service... Oct 2 19:30:45.554550 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:30:45.554570 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:30:45.554589 systemd[1]: Starting modprobe@loop.service... Oct 2 19:30:45.554608 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:30:45.554626 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:30:45.554703 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:30:45.554725 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:30:45.554745 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:30:45.554764 systemd[1]: Stopped systemd-journald.service. Oct 2 19:30:45.554783 systemd[1]: Starting systemd-journald.service... Oct 2 19:30:45.554886 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:30:45.554943 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:30:45.554965 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:30:45.554983 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:30:45.555002 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:30:45.555040 systemd[1]: Stopped verity-setup.service. Oct 2 19:30:45.555060 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:30:45.555077 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:30:45.555093 kernel: fuse: init (API version 7.34) Oct 2 19:30:45.555115 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:30:45.555495 kernel: loop: module loaded Oct 2 19:30:45.555533 systemd[1]: Mounted media.mount. Oct 2 19:30:45.555552 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:30:45.555570 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:30:45.555587 systemd[1]: Mounted tmp.mount. Oct 2 19:30:45.555604 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:30:45.555623 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:30:45.556858 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:30:45.556885 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:30:45.556904 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:30:45.556923 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:30:45.556976 systemd[1]: Finished modprobe@drm.service. Oct 2 19:30:45.556996 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:30:45.557016 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:30:45.557039 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:30:45.557063 systemd-journald[1396]: Journal started Oct 2 19:30:45.557142 systemd-journald[1396]: Runtime Journal (/run/log/journal/ec22e1471e923f68cef7ec2b24592fbb) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:30:39.407000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:30:39.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:30:39.719000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:30:39.720000 audit: BPF prog-id=10 op=LOAD Oct 2 19:30:39.720000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:30:39.720000 audit: BPF prog-id=11 op=LOAD Oct 2 19:30:45.559853 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:30:39.720000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:30:45.143000 audit: BPF prog-id=12 op=LOAD Oct 2 19:30:45.143000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:30:45.144000 audit: BPF prog-id=13 op=LOAD Oct 2 19:30:45.147000 audit: BPF prog-id=14 op=LOAD Oct 2 19:30:45.147000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:30:45.147000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:30:45.151000 audit: BPF prog-id=15 op=LOAD Oct 2 19:30:45.151000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:30:45.152000 audit: BPF prog-id=16 op=LOAD Oct 2 19:30:45.153000 audit: BPF prog-id=17 op=LOAD Oct 2 19:30:45.153000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:30:45.154000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:30:45.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.161000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:30:45.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.373000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.402000 audit: BPF prog-id=18 op=LOAD Oct 2 19:30:45.402000 audit: BPF prog-id=19 op=LOAD Oct 2 19:30:45.402000 audit: BPF prog-id=20 op=LOAD Oct 2 19:30:45.403000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:30:45.403000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:30:45.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.533000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.537000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:30:45.537000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7fff3346f700 a2=4000 a3=7fff3346f79c items=0 ppid=1 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:45.537000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:30:45.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.554000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.142039 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:30:40.105710 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:30:45.155268 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:30:40.106722 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:30:45.568227 systemd[1]: Started systemd-journald.service. Oct 2 19:30:40.106743 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:30:45.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:40.106777 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:30:40.107056 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:30:45.568885 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:30:40.107257 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:30:45.569079 systemd[1]: Finished modprobe@loop.service. Oct 2 19:30:40.107272 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:30:40.107477 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:30:40.107522 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:30:40.107535 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:30:40.108173 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:30:40.108509 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:30:40.108536 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:30:45.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:40.108576 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:30:45.571767 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:30:40.108597 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:30:45.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:40.108611 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:40Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:30:44.387834 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:44Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:30:44.388115 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:44Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:30:44.388231 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:44Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:30:44.388414 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:44Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:30:44.388461 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:44Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:30:44.388690 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:30:44Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:30:45.584594 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:30:45.585000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.586642 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:30:45.590954 systemd[1]: Reached target network-pre.target. Oct 2 19:30:45.596975 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:30:45.601712 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:30:45.608046 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:30:45.613118 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:30:45.617381 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:30:45.618780 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:30:45.621928 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:30:45.623327 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:30:45.625308 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:30:45.628424 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:30:45.633042 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:30:45.654897 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:30:45.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.659546 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:30:45.673002 systemd-journald[1396]: Time spent on flushing to /var/log/journal/ec22e1471e923f68cef7ec2b24592fbb is 89.614ms for 1210 entries. Oct 2 19:30:45.673002 systemd-journald[1396]: System Journal (/var/log/journal/ec22e1471e923f68cef7ec2b24592fbb) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:30:45.804507 systemd-journald[1396]: Received client request to flush runtime journal. Oct 2 19:30:45.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:45.697576 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:30:45.808129 udevadm[1434]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 19:30:45.750713 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:30:45.753506 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:30:45.781145 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:30:45.783653 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:30:45.806063 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:30:45.952632 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:30:45.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:46.652142 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:30:46.653000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:46.654000 audit: BPF prog-id=21 op=LOAD Oct 2 19:30:46.654000 audit: BPF prog-id=22 op=LOAD Oct 2 19:30:46.654000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:30:46.654000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:30:46.655992 systemd[1]: Starting systemd-udevd.service... Oct 2 19:30:46.694550 systemd-udevd[1442]: Using default interface naming scheme 'v252'. Oct 2 19:30:46.773284 systemd[1]: Started systemd-udevd.service. Oct 2 19:30:46.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:46.776000 audit: BPF prog-id=23 op=LOAD Oct 2 19:30:46.778870 systemd[1]: Starting systemd-networkd.service... Oct 2 19:30:46.808000 audit: BPF prog-id=24 op=LOAD Oct 2 19:30:46.808000 audit: BPF prog-id=25 op=LOAD Oct 2 19:30:46.808000 audit: BPF prog-id=26 op=LOAD Oct 2 19:30:46.810434 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:30:46.875594 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:30:46.889805 systemd[1]: Started systemd-userdbd.service. Oct 2 19:30:46.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:46.896317 (udev-worker)[1443]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:30:47.000622 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:30:47.007885 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:30:47.008001 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Oct 2 19:30:47.010722 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 19:30:47.034000 audit[1453]: AVC avc: denied { confidentiality } for pid=1453 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:30:47.034000 audit[1453]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55f84ee336a0 a1=32194 a2=7f97715f2bc5 a3=5 items=106 ppid=1442 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:47.034000 audit: CWD cwd="/" Oct 2 19:30:47.034000 audit: PATH item=0 name=(null) inode=14534 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=1 name=(null) inode=14535 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=2 name=(null) inode=14534 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=3 name=(null) inode=14536 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=4 name=(null) inode=14534 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=5 name=(null) inode=14537 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=6 name=(null) inode=14537 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=7 name=(null) inode=14538 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=8 name=(null) inode=14537 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=9 name=(null) inode=14539 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=10 name=(null) inode=14537 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=11 name=(null) inode=14540 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=12 name=(null) inode=14537 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=13 name=(null) inode=14541 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=14 name=(null) inode=14537 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=15 name=(null) inode=14542 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=16 name=(null) inode=14534 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=17 name=(null) inode=14543 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=18 name=(null) inode=14543 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=19 name=(null) inode=14544 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=20 name=(null) inode=14543 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=21 name=(null) inode=14545 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=22 name=(null) inode=14543 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=23 name=(null) inode=14546 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=24 name=(null) inode=14543 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=25 name=(null) inode=14547 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=26 name=(null) inode=14543 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=27 name=(null) inode=14548 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=28 name=(null) inode=14534 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=29 name=(null) inode=14549 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=30 name=(null) inode=14549 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=31 name=(null) inode=14550 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=32 name=(null) inode=14549 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=33 name=(null) inode=14551 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=34 name=(null) inode=14549 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=35 name=(null) inode=14552 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=36 name=(null) inode=14549 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=37 name=(null) inode=14553 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=38 name=(null) inode=14549 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=39 name=(null) inode=14554 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=40 name=(null) inode=14534 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=41 name=(null) inode=14555 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=42 name=(null) inode=14555 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=43 name=(null) inode=14556 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=44 name=(null) inode=14555 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=45 name=(null) inode=14557 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=46 name=(null) inode=14555 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=47 name=(null) inode=14558 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=48 name=(null) inode=14555 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=49 name=(null) inode=14559 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=50 name=(null) inode=14555 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=51 name=(null) inode=14560 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=52 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=53 name=(null) inode=14561 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=54 name=(null) inode=14561 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=55 name=(null) inode=14562 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=56 name=(null) inode=14561 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=57 name=(null) inode=14563 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=58 name=(null) inode=14561 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=59 name=(null) inode=14564 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=60 name=(null) inode=14564 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=61 name=(null) inode=14565 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=62 name=(null) inode=14564 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=63 name=(null) inode=14566 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=64 name=(null) inode=14564 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=65 name=(null) inode=14567 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=66 name=(null) inode=14564 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=67 name=(null) inode=14568 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=68 name=(null) inode=14564 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=69 name=(null) inode=14569 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=70 name=(null) inode=14561 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=71 name=(null) inode=14570 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=72 name=(null) inode=14570 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=73 name=(null) inode=14571 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=74 name=(null) inode=14570 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=75 name=(null) inode=14572 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=76 name=(null) inode=14570 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=77 name=(null) inode=14573 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=78 name=(null) inode=14570 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=79 name=(null) inode=14574 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=80 name=(null) inode=14570 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=81 name=(null) inode=14575 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=82 name=(null) inode=14561 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=83 name=(null) inode=14576 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=84 name=(null) inode=14576 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=85 name=(null) inode=14577 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=86 name=(null) inode=14576 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=87 name=(null) inode=14578 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=88 name=(null) inode=14576 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=89 name=(null) inode=14579 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=90 name=(null) inode=14576 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=91 name=(null) inode=14580 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=92 name=(null) inode=14576 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=93 name=(null) inode=14581 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=94 name=(null) inode=14561 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=95 name=(null) inode=14582 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=96 name=(null) inode=14582 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=97 name=(null) inode=14583 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=98 name=(null) inode=14582 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=99 name=(null) inode=14584 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=100 name=(null) inode=14582 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=101 name=(null) inode=14585 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=102 name=(null) inode=14582 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=103 name=(null) inode=14586 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=104 name=(null) inode=14582 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PATH item=105 name=(null) inode=14587 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:30:47.034000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:30:47.093570 systemd-networkd[1448]: lo: Link UP Oct 2 19:30:47.093585 systemd-networkd[1448]: lo: Gained carrier Oct 2 19:30:47.094432 systemd-networkd[1448]: Enumeration completed Oct 2 19:30:47.094560 systemd[1]: Started systemd-networkd.service. Oct 2 19:30:47.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:47.098618 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:30:47.104736 systemd-networkd[1448]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:30:47.109762 systemd-networkd[1448]: eth0: Link UP Oct 2 19:30:47.112622 systemd-networkd[1448]: eth0: Gained carrier Oct 2 19:30:47.112766 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:30:47.118728 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 19:30:47.127864 systemd-networkd[1448]: eth0: DHCPv4 address 172.31.28.204/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:30:47.165693 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1455) Oct 2 19:30:47.188702 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 19:30:47.192698 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:30:47.289335 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:30:47.398311 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:30:47.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:47.401059 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:30:47.490864 lvm[1556]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:30:47.526333 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:30:47.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:47.528000 systemd[1]: Reached target cryptsetup.target. Oct 2 19:30:47.530932 systemd[1]: Starting lvm2-activation.service... Oct 2 19:30:47.537888 lvm[1557]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:30:47.576150 systemd[1]: Finished lvm2-activation.service. Oct 2 19:30:47.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:47.578486 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:30:47.580046 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:30:47.580080 systemd[1]: Reached target local-fs.target. Oct 2 19:30:47.581558 systemd[1]: Reached target machines.target. Oct 2 19:30:47.584753 systemd[1]: Starting ldconfig.service... Oct 2 19:30:47.586699 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:30:47.586781 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:30:47.588381 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:30:47.591466 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:30:47.595233 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:30:47.597766 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:30:47.597857 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:30:47.603041 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:30:47.648761 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1559 (bootctl) Oct 2 19:30:47.651434 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:30:47.658001 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:30:47.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:47.695293 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:30:47.755555 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:30:47.806219 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:30:47.914002 systemd-fsck[1569]: fsck.fat 4.2 (2021-01-31) Oct 2 19:30:47.914002 systemd-fsck[1569]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 19:30:47.925388 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:30:47.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:47.929651 systemd[1]: Mounting boot.mount... Oct 2 19:30:47.946664 systemd[1]: Mounted boot.mount. Oct 2 19:30:47.978301 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:30:47.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:48.125009 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:30:48.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:48.127874 systemd[1]: Starting audit-rules.service... Oct 2 19:30:48.135000 audit: BPF prog-id=27 op=LOAD Oct 2 19:30:48.130743 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:30:48.134211 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:30:48.137546 systemd[1]: Starting systemd-resolved.service... Oct 2 19:30:48.138000 audit: BPF prog-id=28 op=LOAD Oct 2 19:30:48.141145 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:30:48.143708 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:30:48.154000 audit[1589]: SYSTEM_BOOT pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:30:48.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:48.159629 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:30:48.177830 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:30:48.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:48.180611 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:30:48.249480 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:30:48.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:48.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:30:48.402593 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:30:48.404075 systemd[1]: Reached target time-set.target. Oct 2 19:30:48.490817 systemd-resolved[1587]: Positive Trust Anchors: Oct 2 19:30:48.490837 systemd-resolved[1587]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:30:48.490896 systemd-resolved[1587]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:30:48.528660 augenrules[1605]: No rules Oct 2 19:30:48.527000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:30:48.527000 audit[1605]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcb5215050 a2=420 a3=0 items=0 ppid=1583 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:30:48.527000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:30:48.529929 systemd[1]: Finished audit-rules.service. Oct 2 19:30:49.004741 systemd-timesyncd[1588]: Contacted time server 108.165.113.147:123 (0.flatcar.pool.ntp.org). Oct 2 19:30:49.005534 systemd-timesyncd[1588]: Initial clock synchronization to Mon 2023-10-02 19:30:49.004365 UTC. Oct 2 19:30:49.005796 systemd-resolved[1587]: Defaulting to hostname 'linux'. Oct 2 19:30:49.007563 systemd[1]: Started systemd-resolved.service. Oct 2 19:30:49.009541 systemd[1]: Reached target network.target. Oct 2 19:30:49.010609 systemd[1]: Reached target nss-lookup.target. Oct 2 19:30:49.047036 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:30:49.048765 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:30:49.342896 systemd-networkd[1448]: eth0: Gained IPv6LL Oct 2 19:30:49.346211 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:30:49.347927 systemd[1]: Reached target network-online.target. Oct 2 19:30:50.043426 ldconfig[1558]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:30:50.053048 systemd[1]: Finished ldconfig.service. Oct 2 19:30:50.055822 systemd[1]: Starting systemd-update-done.service... Oct 2 19:30:50.067384 systemd[1]: Finished systemd-update-done.service. Oct 2 19:30:50.069254 systemd[1]: Reached target sysinit.target. Oct 2 19:30:50.070843 systemd[1]: Started motdgen.path. Oct 2 19:30:50.072263 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:30:50.074014 systemd[1]: Started logrotate.timer. Oct 2 19:30:50.075195 systemd[1]: Started mdadm.timer. Oct 2 19:30:50.076304 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:30:50.077497 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:30:50.077525 systemd[1]: Reached target paths.target. Oct 2 19:30:50.078556 systemd[1]: Reached target timers.target. Oct 2 19:30:50.079943 systemd[1]: Listening on dbus.socket. Oct 2 19:30:50.082267 systemd[1]: Starting docker.socket... Oct 2 19:30:50.087643 systemd[1]: Listening on sshd.socket. Oct 2 19:30:50.089000 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:30:50.089871 systemd[1]: Listening on docker.socket. Oct 2 19:30:50.091699 systemd[1]: Reached target sockets.target. Oct 2 19:30:50.092992 systemd[1]: Reached target basic.target. Oct 2 19:30:50.094330 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:30:50.094359 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:30:50.095887 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:30:50.099204 systemd[1]: Starting containerd.service... Oct 2 19:30:50.102171 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:30:50.116114 systemd[1]: Starting dbus.service... Oct 2 19:30:50.119831 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:30:50.132454 systemd[1]: Starting extend-filesystems.service... Oct 2 19:30:50.135549 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:30:50.137649 systemd[1]: Starting motdgen.service... Oct 2 19:30:50.144142 systemd[1]: Started nvidia.service. Oct 2 19:30:50.147006 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:30:50.149687 systemd[1]: Starting prepare-critools.service... Oct 2 19:30:50.152596 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:30:50.155755 systemd[1]: Starting sshd-keygen.service... Oct 2 19:30:50.169009 systemd[1]: Starting systemd-logind.service... Oct 2 19:30:50.171586 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:30:50.171875 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:30:50.172714 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:30:50.173879 systemd[1]: Starting update-engine.service... Oct 2 19:30:50.223292 jq[1627]: true Oct 2 19:30:50.181299 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:30:50.285492 jq[1617]: false Oct 2 19:30:50.230616 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:30:50.230856 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:30:50.330524 tar[1630]: crictl Oct 2 19:30:50.392325 tar[1629]: ./ Oct 2 19:30:50.392325 tar[1629]: ./macvlan Oct 2 19:30:50.392707 jq[1633]: true Oct 2 19:30:50.356795 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:30:50.357023 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:30:50.424152 dbus-daemon[1616]: [system] SELinux support is enabled Oct 2 19:30:50.424344 systemd[1]: Started dbus.service. Oct 2 19:30:50.430627 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:30:50.430669 systemd[1]: Reached target system-config.target. Oct 2 19:30:50.432138 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:30:50.432168 systemd[1]: Reached target user-config.target. Oct 2 19:30:50.476928 dbus-daemon[1616]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1448 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:30:50.507510 dbus-daemon[1616]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1 Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1p1 Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1p2 Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1p3 Oct 2 19:30:50.545158 extend-filesystems[1618]: Found usr Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1p4 Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1p6 Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1p7 Oct 2 19:30:50.545158 extend-filesystems[1618]: Found nvme0n1p9 Oct 2 19:30:50.545158 extend-filesystems[1618]: Checking size of /dev/nvme0n1p9 Oct 2 19:30:50.528050 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:30:50.578173 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:30:50.578391 systemd[1]: Finished motdgen.service. Oct 2 19:30:50.608565 amazon-ssm-agent[1613]: 2023/10/02 19:30:50 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:30:50.617044 amazon-ssm-agent[1613]: Initializing new seelog logger Oct 2 19:30:50.617044 amazon-ssm-agent[1613]: New Seelog Logger Creation Complete Oct 2 19:30:50.617044 amazon-ssm-agent[1613]: 2023/10/02 19:30:50 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:30:50.617044 amazon-ssm-agent[1613]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:30:50.618867 amazon-ssm-agent[1613]: 2023/10/02 19:30:50 processing appconfig overrides Oct 2 19:30:50.620412 extend-filesystems[1618]: Resized partition /dev/nvme0n1p9 Oct 2 19:30:50.643646 extend-filesystems[1682]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:30:50.668468 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:30:50.706466 update_engine[1626]: I1002 19:30:50.705313 1626 main.cc:92] Flatcar Update Engine starting Oct 2 19:30:50.733052 systemd[1]: Started update-engine.service. Oct 2 19:30:50.738076 systemd[1]: Started locksmithd.service. Oct 2 19:30:50.745396 update_engine[1626]: I1002 19:30:50.736572 1626 update_check_scheduler.cc:74] Next update check in 9m19s Oct 2 19:30:50.765595 bash[1680]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:30:50.768998 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:30:50.819266 env[1634]: time="2023-10-02T19:30:50.819189513Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:30:50.840742 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:30:50.889296 systemd-logind[1625]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:30:50.889350 systemd-logind[1625]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 19:30:50.889374 systemd-logind[1625]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:30:50.891994 extend-filesystems[1682]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:30:50.891994 extend-filesystems[1682]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:30:50.891994 extend-filesystems[1682]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:30:50.891589 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:30:50.901607 extend-filesystems[1618]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:30:50.891950 systemd[1]: Finished extend-filesystems.service. Oct 2 19:30:50.903548 systemd-logind[1625]: New seat seat0. Oct 2 19:30:50.906810 systemd[1]: Started systemd-logind.service. Oct 2 19:30:50.950445 tar[1629]: ./static Oct 2 19:30:50.975668 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:30:51.045845 env[1634]: time="2023-10-02T19:30:51.032687950Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:30:51.046302 env[1634]: time="2023-10-02T19:30:51.046266393Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:30:51.048585 env[1634]: time="2023-10-02T19:30:51.048535329Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:30:51.063402 env[1634]: time="2023-10-02T19:30:51.063343794Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:30:51.064929 env[1634]: time="2023-10-02T19:30:51.064884646Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:30:51.065188 env[1634]: time="2023-10-02T19:30:51.065164907Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:30:51.065316 env[1634]: time="2023-10-02T19:30:51.065295672Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:30:51.065420 env[1634]: time="2023-10-02T19:30:51.065403264Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:30:51.065940 env[1634]: time="2023-10-02T19:30:51.065916554Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:30:51.067128 env[1634]: time="2023-10-02T19:30:51.067104218Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:30:51.067534 env[1634]: time="2023-10-02T19:30:51.067506622Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:30:51.068067 env[1634]: time="2023-10-02T19:30:51.068038035Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:30:51.068269 env[1634]: time="2023-10-02T19:30:51.068247559Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:30:51.068438 env[1634]: time="2023-10-02T19:30:51.068418875Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:30:51.090382 env[1634]: time="2023-10-02T19:30:51.090332080Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:30:51.090577 env[1634]: time="2023-10-02T19:30:51.090555513Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:30:51.091040 env[1634]: time="2023-10-02T19:30:51.091014408Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:30:51.091255 env[1634]: time="2023-10-02T19:30:51.091234476Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.091458 env[1634]: time="2023-10-02T19:30:51.091436308Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.091540 env[1634]: time="2023-10-02T19:30:51.091526777Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.091607 env[1634]: time="2023-10-02T19:30:51.091593650Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.091684 env[1634]: time="2023-10-02T19:30:51.091670037Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.091884 env[1634]: time="2023-10-02T19:30:51.091862841Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.092154 env[1634]: time="2023-10-02T19:30:51.092123916Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.092263 env[1634]: time="2023-10-02T19:30:51.092244995Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.092339 env[1634]: time="2023-10-02T19:30:51.092324509Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:30:51.092562 env[1634]: time="2023-10-02T19:30:51.092542690Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:30:51.092782 env[1634]: time="2023-10-02T19:30:51.092760677Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:30:51.093315 env[1634]: time="2023-10-02T19:30:51.093291560Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:30:51.093458 env[1634]: time="2023-10-02T19:30:51.093440537Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.093594 env[1634]: time="2023-10-02T19:30:51.093575874Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:30:51.093822 env[1634]: time="2023-10-02T19:30:51.093801059Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.093914 env[1634]: time="2023-10-02T19:30:51.093898194Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.093985 env[1634]: time="2023-10-02T19:30:51.093971047Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094066 env[1634]: time="2023-10-02T19:30:51.094049827Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094139 env[1634]: time="2023-10-02T19:30:51.094125609Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094224 env[1634]: time="2023-10-02T19:30:51.094208379Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094305 env[1634]: time="2023-10-02T19:30:51.094291961Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094368 env[1634]: time="2023-10-02T19:30:51.094356872Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094450 env[1634]: time="2023-10-02T19:30:51.094435843Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:30:51.094794 env[1634]: time="2023-10-02T19:30:51.094770789Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094899 env[1634]: time="2023-10-02T19:30:51.094882637Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.094976 env[1634]: time="2023-10-02T19:30:51.094962441Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.097419 env[1634]: time="2023-10-02T19:30:51.097388366Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:30:51.097554 env[1634]: time="2023-10-02T19:30:51.097529374Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:30:51.097629 env[1634]: time="2023-10-02T19:30:51.097614879Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:30:51.097758 env[1634]: time="2023-10-02T19:30:51.097711205Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:30:51.097867 env[1634]: time="2023-10-02T19:30:51.097851726Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:30:51.101756 env[1634]: time="2023-10-02T19:30:51.101652990Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:30:51.105182 env[1634]: time="2023-10-02T19:30:51.101928473Z" level=info msg="Connect containerd service" Oct 2 19:30:51.105182 env[1634]: time="2023-10-02T19:30:51.101992976Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:30:51.106057 env[1634]: time="2023-10-02T19:30:51.106021654Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:30:51.110135 env[1634]: time="2023-10-02T19:30:51.110101320Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:30:51.110387 env[1634]: time="2023-10-02T19:30:51.110367934Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:30:51.113455 systemd[1]: Started containerd.service. Oct 2 19:30:51.113834 env[1634]: time="2023-10-02T19:30:51.113801228Z" level=info msg="containerd successfully booted in 0.321255s" Oct 2 19:30:51.116209 dbus-daemon[1616]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:30:51.116469 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:30:51.117059 dbus-daemon[1616]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1663 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:30:51.118798 env[1634]: time="2023-10-02T19:30:51.118737695Z" level=info msg="Start subscribing containerd event" Oct 2 19:30:51.119146 env[1634]: time="2023-10-02T19:30:51.119123203Z" level=info msg="Start recovering state" Oct 2 19:30:51.119320 env[1634]: time="2023-10-02T19:30:51.119304948Z" level=info msg="Start event monitor" Oct 2 19:30:51.119400 env[1634]: time="2023-10-02T19:30:51.119387257Z" level=info msg="Start snapshots syncer" Oct 2 19:30:51.119482 env[1634]: time="2023-10-02T19:30:51.119468204Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:30:51.120279 env[1634]: time="2023-10-02T19:30:51.120254848Z" level=info msg="Start streaming server" Oct 2 19:30:51.121876 systemd[1]: Starting polkit.service... Oct 2 19:30:51.173512 polkitd[1711]: Started polkitd version 121 Oct 2 19:30:51.186083 tar[1629]: ./vlan Oct 2 19:30:51.200835 polkitd[1711]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:30:51.200916 polkitd[1711]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:30:51.212306 polkitd[1711]: Finished loading, compiling and executing 2 rules Oct 2 19:30:51.212969 dbus-daemon[1616]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:30:51.213434 systemd[1]: Started polkit.service. Oct 2 19:30:51.214032 polkitd[1711]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:30:51.249031 systemd-hostnamed[1663]: Hostname set to (transient) Oct 2 19:30:51.249032 systemd-resolved[1587]: System hostname changed to 'ip-172-31-28-204'. Oct 2 19:30:51.285379 tar[1629]: ./portmap Oct 2 19:30:51.437656 tar[1629]: ./host-local Oct 2 19:30:51.516541 coreos-metadata[1615]: Oct 02 19:30:51.514 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:30:51.517086 coreos-metadata[1615]: Oct 02 19:30:51.516 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:30:51.520928 coreos-metadata[1615]: Oct 02 19:30:51.520 INFO Fetch successful Oct 2 19:30:51.521110 coreos-metadata[1615]: Oct 02 19:30:51.521 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:30:51.521803 coreos-metadata[1615]: Oct 02 19:30:51.521 INFO Fetch successful Oct 2 19:30:51.524484 unknown[1615]: wrote ssh authorized keys file for user: core Oct 2 19:30:51.538047 tar[1629]: ./vrf Oct 2 19:30:51.551485 update-ssh-keys[1790]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:30:51.552270 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:30:51.559751 amazon-ssm-agent[1613]: 2023-10-02 19:30:51 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:30:51.559751 amazon-ssm-agent[1613]: 2023-10-02 19:30:51 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-011b0ff1814566240 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-011b0ff1814566240 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:30:51.559751 amazon-ssm-agent[1613]: status code: 400, request id: 8b0c814a-347e-459c-9286-6e4adc1c42b8 Oct 2 19:30:51.674823 tar[1629]: ./bridge Oct 2 19:30:51.796012 tar[1629]: ./tuning Oct 2 19:30:51.891818 tar[1629]: ./firewall Oct 2 19:30:52.000790 systemd[1]: Finished prepare-critools.service. Oct 2 19:30:52.012290 sshd_keygen[1640]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:30:52.012627 tar[1629]: ./host-device Oct 2 19:30:52.061842 systemd[1]: Finished sshd-keygen.service. Oct 2 19:30:52.065092 systemd[1]: Starting issuegen.service... Oct 2 19:30:52.076593 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:30:52.076828 systemd[1]: Finished issuegen.service. Oct 2 19:30:52.080070 tar[1629]: ./sbr Oct 2 19:30:52.080560 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:30:52.095004 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:30:52.098999 systemd[1]: Started getty@tty1.service. Oct 2 19:30:52.103053 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:30:52.112432 systemd[1]: Reached target getty.target. Oct 2 19:30:52.163884 tar[1629]: ./loopback Oct 2 19:30:52.214472 tar[1629]: ./dhcp Oct 2 19:30:52.357658 tar[1629]: ./ptp Oct 2 19:30:52.424342 tar[1629]: ./ipvlan Oct 2 19:30:52.471274 locksmithd[1687]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:30:52.488892 tar[1629]: ./bandwidth Oct 2 19:30:52.588823 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:30:52.590825 systemd[1]: Reached target multi-user.target. Oct 2 19:30:52.596109 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:30:52.612161 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:30:52.612366 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:30:52.615742 systemd[1]: Startup finished in 845ms (kernel) + 17.275s (initrd) + 12.939s (userspace) = 31.060s. Oct 2 19:30:58.564377 systemd[1]: Created slice system-sshd.slice. Oct 2 19:30:58.566228 systemd[1]: Started sshd@0-172.31.28.204:22-139.178.89.65:38560.service. Oct 2 19:30:58.829825 sshd[1824]: Accepted publickey for core from 139.178.89.65 port 38560 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:30:58.832935 sshd[1824]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:58.849427 systemd[1]: Created slice user-500.slice. Oct 2 19:30:58.851577 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:30:58.860004 systemd-logind[1625]: New session 1 of user core. Oct 2 19:30:58.869010 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:30:58.871945 systemd[1]: Starting user@500.service... Oct 2 19:30:58.877795 (systemd)[1827]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:59.044229 systemd[1827]: Queued start job for default target default.target. Oct 2 19:30:59.045226 systemd[1827]: Reached target paths.target. Oct 2 19:30:59.045251 systemd[1827]: Reached target sockets.target. Oct 2 19:30:59.045264 systemd[1827]: Reached target timers.target. Oct 2 19:30:59.045276 systemd[1827]: Reached target basic.target. Oct 2 19:30:59.045383 systemd[1]: Started user@500.service. Oct 2 19:30:59.045695 systemd[1827]: Reached target default.target. Oct 2 19:30:59.045815 systemd[1827]: Startup finished in 158ms. Oct 2 19:30:59.050868 systemd[1]: Started session-1.scope. Oct 2 19:30:59.210942 systemd[1]: Started sshd@1-172.31.28.204:22-139.178.89.65:38564.service. Oct 2 19:30:59.391744 sshd[1836]: Accepted publickey for core from 139.178.89.65 port 38564 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:30:59.393262 sshd[1836]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:59.398783 systemd-logind[1625]: New session 2 of user core. Oct 2 19:30:59.400521 systemd[1]: Started session-2.scope. Oct 2 19:30:59.537327 sshd[1836]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:59.541061 systemd[1]: sshd@1-172.31.28.204:22-139.178.89.65:38564.service: Deactivated successfully. Oct 2 19:30:59.542166 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:30:59.544209 systemd-logind[1625]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:30:59.546882 systemd-logind[1625]: Removed session 2. Oct 2 19:30:59.565045 systemd[1]: Started sshd@2-172.31.28.204:22-139.178.89.65:38578.service. Oct 2 19:30:59.739183 sshd[1842]: Accepted publickey for core from 139.178.89.65 port 38578 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:30:59.741387 sshd[1842]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:30:59.753602 systemd-logind[1625]: New session 3 of user core. Oct 2 19:30:59.754376 systemd[1]: Started session-3.scope. Oct 2 19:30:59.877926 sshd[1842]: pam_unix(sshd:session): session closed for user core Oct 2 19:30:59.881132 systemd[1]: sshd@2-172.31.28.204:22-139.178.89.65:38578.service: Deactivated successfully. Oct 2 19:30:59.882393 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:30:59.883186 systemd-logind[1625]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:30:59.884750 systemd-logind[1625]: Removed session 3. Oct 2 19:30:59.907390 systemd[1]: Started sshd@3-172.31.28.204:22-139.178.89.65:38584.service. Oct 2 19:31:00.081225 sshd[1848]: Accepted publickey for core from 139.178.89.65 port 38584 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:31:00.086366 sshd[1848]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:00.102790 systemd-logind[1625]: New session 4 of user core. Oct 2 19:31:00.104139 systemd[1]: Started session-4.scope. Oct 2 19:31:00.239166 sshd[1848]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:00.246659 systemd[1]: sshd@3-172.31.28.204:22-139.178.89.65:38584.service: Deactivated successfully. Oct 2 19:31:00.248545 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:31:00.249623 systemd-logind[1625]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:31:00.250756 systemd-logind[1625]: Removed session 4. Oct 2 19:31:00.266391 systemd[1]: Started sshd@4-172.31.28.204:22-139.178.89.65:38586.service. Oct 2 19:31:00.436413 sshd[1854]: Accepted publickey for core from 139.178.89.65 port 38586 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:31:00.440179 sshd[1854]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:00.447116 systemd[1]: Started session-5.scope. Oct 2 19:31:00.447907 systemd-logind[1625]: New session 5 of user core. Oct 2 19:31:00.655789 sudo[1857]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:31:00.656379 sudo[1857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:00.667150 dbus-daemon[1616]: \xd0\xcdq\xfa\xbcU: received setenforce notice (enforcing=1510444976) Oct 2 19:31:00.669834 sudo[1857]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:00.694617 sshd[1854]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:00.698651 systemd[1]: sshd@4-172.31.28.204:22-139.178.89.65:38586.service: Deactivated successfully. Oct 2 19:31:00.699976 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:31:00.701030 systemd-logind[1625]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:31:00.702415 systemd-logind[1625]: Removed session 5. Oct 2 19:31:00.721844 systemd[1]: Started sshd@5-172.31.28.204:22-139.178.89.65:38592.service. Oct 2 19:31:00.919767 sshd[1861]: Accepted publickey for core from 139.178.89.65 port 38592 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:31:00.921577 sshd[1861]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:00.934136 systemd-logind[1625]: New session 6 of user core. Oct 2 19:31:00.935790 systemd[1]: Started session-6.scope. Oct 2 19:31:01.057053 sudo[1865]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:31:01.057628 sudo[1865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:01.074298 sudo[1865]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:01.094753 sudo[1864]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:31:01.095247 sudo[1864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:01.143324 systemd[1]: Stopping audit-rules.service... Oct 2 19:31:01.145000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:31:01.147308 auditctl[1868]: No rules Oct 2 19:31:01.147806 kernel: kauditd_printk_skb: 181 callbacks suppressed Oct 2 19:31:01.147855 kernel: audit: type=1305 audit(1696275061.145:164): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:31:01.148608 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:31:01.148853 systemd[1]: Stopped audit-rules.service. Oct 2 19:31:01.145000 audit[1868]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeb1212d30 a2=420 a3=0 items=0 ppid=1 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:01.154458 systemd[1]: Starting audit-rules.service... Oct 2 19:31:01.165486 kernel: audit: type=1300 audit(1696275061.145:164): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffeb1212d30 a2=420 a3=0 items=0 ppid=1 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:01.145000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:31:01.171466 kernel: audit: type=1327 audit(1696275061.145:164): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:31:01.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.183753 kernel: audit: type=1131 audit(1696275061.147:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.217376 augenrules[1885]: No rules Oct 2 19:31:01.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.221586 sudo[1864]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:01.218262 systemd[1]: Finished audit-rules.service. Oct 2 19:31:01.230473 kernel: audit: type=1130 audit(1696275061.217:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.218000 audit[1864]: USER_END pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.218000 audit[1864]: CRED_DISP pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.249920 sshd[1861]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:01.257968 kernel: audit: type=1106 audit(1696275061.218:167): pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.258064 kernel: audit: type=1104 audit(1696275061.218:168): pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.258111 kernel: audit: type=1106 audit(1696275061.255:169): pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.255000 audit[1861]: USER_END pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.259311 systemd-logind[1625]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:31:01.261700 systemd[1]: sshd@5-172.31.28.204:22-139.178.89.65:38592.service: Deactivated successfully. Oct 2 19:31:01.268477 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:31:01.270077 systemd-logind[1625]: Removed session 6. Oct 2 19:31:01.255000 audit[1861]: CRED_DISP pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.280542 kernel: audit: type=1104 audit(1696275061.255:170): pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.282142 kernel: audit: type=1131 audit(1696275061.256:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.204:22-139.178.89.65:38592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.204:22-139.178.89.65:38592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.204:22-139.178.89.65:38600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.290882 systemd[1]: Started sshd@6-172.31.28.204:22-139.178.89.65:38600.service. Oct 2 19:31:01.463000 audit[1891]: USER_ACCT pid=1891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.466035 sshd[1891]: Accepted publickey for core from 139.178.89.65 port 38600 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:31:01.465000 audit[1891]: CRED_ACQ pid=1891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.466000 audit[1891]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc60967c40 a2=3 a3=0 items=0 ppid=1 pid=1891 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:01.466000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:31:01.467258 sshd[1891]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:31:01.480541 systemd[1]: Started session-7.scope. Oct 2 19:31:01.481302 systemd-logind[1625]: New session 7 of user core. Oct 2 19:31:01.500000 audit[1891]: USER_START pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.502000 audit[1893]: CRED_ACQ pid=1893 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:01.602000 audit[1894]: USER_ACCT pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.603967 sudo[1894]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:31:01.603000 audit[1894]: CRED_REFR pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:01.604290 sudo[1894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:31:01.626000 audit[1894]: USER_START pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:02.468875 systemd[1]: Starting docker.service... Oct 2 19:31:02.544968 env[1909]: time="2023-10-02T19:31:02.544893365Z" level=info msg="Starting up" Oct 2 19:31:02.549894 env[1909]: time="2023-10-02T19:31:02.549851720Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:31:02.549894 env[1909]: time="2023-10-02T19:31:02.549879391Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:31:02.550079 env[1909]: time="2023-10-02T19:31:02.549907444Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:31:02.550079 env[1909]: time="2023-10-02T19:31:02.549923770Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:31:02.564322 env[1909]: time="2023-10-02T19:31:02.564253786Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:31:02.564322 env[1909]: time="2023-10-02T19:31:02.564297574Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:31:02.564322 env[1909]: time="2023-10-02T19:31:02.564328190Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:31:02.564583 env[1909]: time="2023-10-02T19:31:02.564343378Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:31:02.583272 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport398602937-merged.mount: Deactivated successfully. Oct 2 19:31:02.656373 env[1909]: time="2023-10-02T19:31:02.656325596Z" level=info msg="Loading containers: start." Oct 2 19:31:02.836000 audit[1940]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1940 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.836000 audit[1940]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff2b4093d0 a2=0 a3=7fff2b4093bc items=0 ppid=1909 pid=1940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.836000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:31:02.843000 audit[1942]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.843000 audit[1942]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd9bf6bbc0 a2=0 a3=7ffd9bf6bbac items=0 ppid=1909 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.843000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:31:02.848000 audit[1944]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.848000 audit[1944]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffee7c0740 a2=0 a3=7fffee7c072c items=0 ppid=1909 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.848000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:31:02.853000 audit[1946]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.853000 audit[1946]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff65b8d0d0 a2=0 a3=7fff65b8d0bc items=0 ppid=1909 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.853000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:31:02.888000 audit[1948]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.888000 audit[1948]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdf6d56070 a2=0 a3=7ffdf6d5605c items=0 ppid=1909 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:31:02.917000 audit[1953]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1953 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.917000 audit[1953]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc606ffc70 a2=0 a3=7ffc606ffc5c items=0 ppid=1909 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.917000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:31:02.941000 audit[1955]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.941000 audit[1955]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd79590c20 a2=0 a3=7ffd79590c0c items=0 ppid=1909 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.941000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:31:02.945000 audit[1957]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.945000 audit[1957]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffdd270b710 a2=0 a3=7ffdd270b6fc items=0 ppid=1909 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.945000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:31:02.950000 audit[1959]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.950000 audit[1959]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd1a852c60 a2=0 a3=7ffd1a852c4c items=0 ppid=1909 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:02.965000 audit[1963]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.965000 audit[1963]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd77be92f0 a2=0 a3=7ffd77be92dc items=0 ppid=1909 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.965000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:02.967000 audit[1964]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1964 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:02.967000 audit[1964]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff566777f0 a2=0 a3=7fff566777dc items=0 ppid=1909 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:02.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:02.997753 kernel: Initializing XFRM netlink socket Oct 2 19:31:03.169054 env[1909]: time="2023-10-02T19:31:03.168910044Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:31:03.174529 (udev-worker)[1920]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:31:03.275000 audit[1972]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1972 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.275000 audit[1972]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdc5180930 a2=0 a3=7ffdc518091c items=0 ppid=1909 pid=1972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.275000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:31:03.361000 audit[1975]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.361000 audit[1975]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffcd4702180 a2=0 a3=7ffcd470216c items=0 ppid=1909 pid=1975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.361000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:31:03.365000 audit[1978]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.365000 audit[1978]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffde0fc4330 a2=0 a3=7ffde0fc431c items=0 ppid=1909 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.365000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:31:03.368000 audit[1980]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.368000 audit[1980]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd5394b1b0 a2=0 a3=7ffd5394b19c items=0 ppid=1909 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.368000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:31:03.371000 audit[1982]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.371000 audit[1982]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe10fd9c20 a2=0 a3=7ffe10fd9c0c items=0 ppid=1909 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.371000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:31:03.374000 audit[1984]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.374000 audit[1984]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fffee7f8790 a2=0 a3=7fffee7f877c items=0 ppid=1909 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.374000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:31:03.377000 audit[1986]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.377000 audit[1986]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd053d21f0 a2=0 a3=7ffd053d21dc items=0 ppid=1909 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.377000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:31:03.408000 audit[1989]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.408000 audit[1989]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffc541aa3d0 a2=0 a3=7ffc541aa3bc items=0 ppid=1909 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.408000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:31:03.418000 audit[1991]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.418000 audit[1991]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc5ee11f60 a2=0 a3=7ffc5ee11f4c items=0 ppid=1909 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.418000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:31:03.423000 audit[1993]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.423000 audit[1993]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff29dc72a0 a2=0 a3=7fff29dc728c items=0 ppid=1909 pid=1993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.423000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:31:03.429000 audit[1995]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.429000 audit[1995]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe173167c0 a2=0 a3=7ffe173167ac items=0 ppid=1909 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.429000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:31:03.430671 systemd-networkd[1448]: docker0: Link UP Oct 2 19:31:03.455000 audit[1999]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.455000 audit[1999]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd257a28e0 a2=0 a3=7ffd257a28cc items=0 ppid=1909 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.455000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:03.457000 audit[2000]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:03.457000 audit[2000]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffec8ed3000 a2=0 a3=7ffec8ed2fec items=0 ppid=1909 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:03.457000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:31:03.459090 env[1909]: time="2023-10-02T19:31:03.459049899Z" level=info msg="Loading containers: done." Oct 2 19:31:03.473949 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2610924321-merged.mount: Deactivated successfully. Oct 2 19:31:03.501821 env[1909]: time="2023-10-02T19:31:03.501766389Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:31:03.502152 env[1909]: time="2023-10-02T19:31:03.502075762Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:31:03.502220 env[1909]: time="2023-10-02T19:31:03.502208369Z" level=info msg="Daemon has completed initialization" Oct 2 19:31:03.527123 systemd[1]: Started docker.service. Oct 2 19:31:03.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:03.545904 env[1909]: time="2023-10-02T19:31:03.545842917Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:31:03.573659 systemd[1]: Reloading. Oct 2 19:31:03.775269 /usr/lib/systemd/system-generators/torcx-generator[2050]: time="2023-10-02T19:31:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:31:03.775311 /usr/lib/systemd/system-generators/torcx-generator[2050]: time="2023-10-02T19:31:03Z" level=info msg="torcx already run" Oct 2 19:31:03.938611 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:31:03.938636 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:31:03.962493 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.097000 audit: BPF prog-id=37 op=LOAD Oct 2 19:31:04.097000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit: BPF prog-id=38 op=LOAD Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.099000 audit: BPF prog-id=39 op=LOAD Oct 2 19:31:04.100000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:31:04.100000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:31:04.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.102000 audit: BPF prog-id=40 op=LOAD Oct 2 19:31:04.102000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.106000 audit: BPF prog-id=41 op=LOAD Oct 2 19:31:04.106000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit: BPF prog-id=42 op=LOAD Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.107000 audit: BPF prog-id=43 op=LOAD Oct 2 19:31:04.107000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:31:04.107000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.109000 audit: BPF prog-id=44 op=LOAD Oct 2 19:31:04.109000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:31:04.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.113000 audit: BPF prog-id=45 op=LOAD Oct 2 19:31:04.113000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit: BPF prog-id=46 op=LOAD Oct 2 19:31:04.116000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit: BPF prog-id=47 op=LOAD Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.116000 audit: BPF prog-id=48 op=LOAD Oct 2 19:31:04.116000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:31:04.116000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.118000 audit: BPF prog-id=49 op=LOAD Oct 2 19:31:04.118000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit: BPF prog-id=50 op=LOAD Oct 2 19:31:04.122000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit: BPF prog-id=51 op=LOAD Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.123000 audit: BPF prog-id=52 op=LOAD Oct 2 19:31:04.123000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:31:04.123000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit: BPF prog-id=53 op=LOAD Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:04.127000 audit: BPF prog-id=54 op=LOAD Oct 2 19:31:04.127000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:31:04.127000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:31:04.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:04.170143 systemd[1]: Started kubelet.service. Oct 2 19:31:04.285930 kubelet[2098]: E1002 19:31:04.284562 2098 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:31:04.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:04.290507 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:31:04.290737 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:31:06.008495 env[1634]: time="2023-10-02T19:31:06.008413056Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\"" Oct 2 19:31:06.728287 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3100403790.mount: Deactivated successfully. Oct 2 19:31:09.765027 env[1634]: time="2023-10-02T19:31:09.764969221Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:09.768153 env[1634]: time="2023-10-02T19:31:09.768103882Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:09.771511 env[1634]: time="2023-10-02T19:31:09.771425219Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:09.774042 env[1634]: time="2023-10-02T19:31:09.773997187Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:bb3eff7d20d94d44ffea47066a4400a70ede58abd9de01c80400817a955397b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:09.774813 env[1634]: time="2023-10-02T19:31:09.774777856Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\" returns image reference \"sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f\"" Oct 2 19:31:09.788379 env[1634]: time="2023-10-02T19:31:09.788330447Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\"" Oct 2 19:31:13.943601 env[1634]: time="2023-10-02T19:31:13.943545989Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:14.023135 env[1634]: time="2023-10-02T19:31:14.023086917Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:14.086610 env[1634]: time="2023-10-02T19:31:14.086562460Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:14.138944 env[1634]: time="2023-10-02T19:31:14.138884716Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:44d63bed8020f7610851a1a653ad7c6df83bd02ad128303de939a39997854ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:14.140096 env[1634]: time="2023-10-02T19:31:14.140050207Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\" returns image reference \"sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f\"" Oct 2 19:31:14.158299 env[1634]: time="2023-10-02T19:31:14.158243393Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\"" Oct 2 19:31:14.496593 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:31:14.497001 systemd[1]: Stopped kubelet.service. Oct 2 19:31:14.510220 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:31:14.511502 kernel: audit: type=1130 audit(1696275074.496:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:14.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:14.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:14.498928 systemd[1]: Started kubelet.service. Oct 2 19:31:14.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:14.530891 kernel: audit: type=1131 audit(1696275074.496:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:14.531034 kernel: audit: type=1130 audit(1696275074.498:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:14.587849 kubelet[2129]: E1002 19:31:14.587803 2129 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:31:14.609372 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:31:14.609750 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:31:14.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:14.632369 kernel: audit: type=1131 audit(1696275074.609:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:17.055167 env[1634]: time="2023-10-02T19:31:17.055055394Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:17.187768 env[1634]: time="2023-10-02T19:31:17.187703566Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:17.292292 env[1634]: time="2023-10-02T19:31:17.292247243Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:17.401502 env[1634]: time="2023-10-02T19:31:17.401372683Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:207b36120eca76bf8607682a3ee37e12b5156b921a9379d776b297ab01ca8198,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:17.402893 env[1634]: time="2023-10-02T19:31:17.402795121Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\" returns image reference \"sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a\"" Oct 2 19:31:17.424301 env[1634]: time="2023-10-02T19:31:17.424255605Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\"" Oct 2 19:31:19.779864 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1971684953.mount: Deactivated successfully. Oct 2 19:31:20.674785 env[1634]: time="2023-10-02T19:31:20.674691131Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:20.678370 env[1634]: time="2023-10-02T19:31:20.678322739Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:20.681299 env[1634]: time="2023-10-02T19:31:20.681254608Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:20.684838 env[1634]: time="2023-10-02T19:31:20.684796381Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4a23f328943342be6a3eeda75cc7a01d175bcf8b096611c97d2aa14c843cf326,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:20.685627 env[1634]: time="2023-10-02T19:31:20.685589580Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\" returns image reference \"sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2\"" Oct 2 19:31:20.698232 env[1634]: time="2023-10-02T19:31:20.698189298Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\"" Oct 2 19:31:21.256991 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:31:21.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:21.264857 kernel: audit: type=1131 audit(1696275081.256:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:21.290000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:31:21.290000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:31:21.297164 kernel: audit: type=1334 audit(1696275081.290:419): prog-id=48 op=UNLOAD Oct 2 19:31:21.297290 kernel: audit: type=1334 audit(1696275081.290:420): prog-id=47 op=UNLOAD Oct 2 19:31:21.297321 kernel: audit: type=1334 audit(1696275081.290:421): prog-id=46 op=UNLOAD Oct 2 19:31:21.290000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:31:21.451672 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3655439933.mount: Deactivated successfully. Oct 2 19:31:21.466621 env[1634]: time="2023-10-02T19:31:21.466562261Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:21.472604 env[1634]: time="2023-10-02T19:31:21.472554634Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:21.486394 env[1634]: time="2023-10-02T19:31:21.486316766Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:21.499350 env[1634]: time="2023-10-02T19:31:21.499301562Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:9001185023633d17a2f98ff69b6ff2615b8ea02a825adffa40422f51dfdcde9d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:21.504392 env[1634]: time="2023-10-02T19:31:21.504295592Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\" returns image reference \"sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517\"" Oct 2 19:31:21.541122 env[1634]: time="2023-10-02T19:31:21.540997710Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:31:22.832025 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3186882255.mount: Deactivated successfully. Oct 2 19:31:24.746754 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:31:24.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:24.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:24.747040 systemd[1]: Stopped kubelet.service. Oct 2 19:31:24.753994 systemd[1]: Started kubelet.service. Oct 2 19:31:24.757206 kernel: audit: type=1130 audit(1696275084.746:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:24.757287 kernel: audit: type=1131 audit(1696275084.746:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:24.757328 kernel: audit: type=1130 audit(1696275084.753:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:24.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:24.812766 kubelet[2153]: E1002 19:31:24.812710 2153 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:31:24.815457 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:31:24.815620 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:31:24.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:24.820769 kernel: audit: type=1131 audit(1696275084.815:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:32.154545 env[1634]: time="2023-10-02T19:31:32.154486745Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:32.233863 env[1634]: time="2023-10-02T19:31:32.233816680Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:32.292239 env[1634]: time="2023-10-02T19:31:32.292185532Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:32.403163 env[1634]: time="2023-10-02T19:31:32.403111923Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:32.411138 env[1634]: time="2023-10-02T19:31:32.410925434Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:31:32.447690 env[1634]: time="2023-10-02T19:31:32.447598098Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:31:33.535855 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3343345571.mount: Deactivated successfully. Oct 2 19:31:34.763815 env[1634]: time="2023-10-02T19:31:34.763754992Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:34.766543 env[1634]: time="2023-10-02T19:31:34.766494196Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:34.771276 env[1634]: time="2023-10-02T19:31:34.771233849Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:34.785671 env[1634]: time="2023-10-02T19:31:34.785620286Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:34.786658 env[1634]: time="2023-10-02T19:31:34.786612200Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:31:34.847739 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Oct 2 19:31:34.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.848440 systemd[1]: Stopped kubelet.service. Oct 2 19:31:34.860906 kernel: audit: type=1130 audit(1696275094.846:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.861064 kernel: audit: type=1131 audit(1696275094.847:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.862300 systemd[1]: Started kubelet.service. Oct 2 19:31:34.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.876744 kernel: audit: type=1130 audit(1696275094.862:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:34.983244 kubelet[2170]: E1002 19:31:34.983195 2170 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:31:34.985730 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:31:34.986181 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:31:34.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:34.991740 kernel: audit: type=1131 audit(1696275094.984:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:31:35.569463 update_engine[1626]: I1002 19:31:35.568790 1626 update_attempter.cc:505] Updating boot flags... Oct 2 19:31:38.307226 systemd[1]: Stopped kubelet.service. Oct 2 19:31:38.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:38.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:38.326406 kernel: audit: type=1130 audit(1696275098.306:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:38.326982 kernel: audit: type=1131 audit(1696275098.307:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:38.353875 systemd[1]: Reloading. Oct 2 19:31:38.519569 /usr/lib/systemd/system-generators/torcx-generator[2345]: time="2023-10-02T19:31:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:31:38.526508 /usr/lib/systemd/system-generators/torcx-generator[2345]: time="2023-10-02T19:31:38Z" level=info msg="torcx already run" Oct 2 19:31:38.664947 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:31:38.664976 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:31:38.689607 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:31:38.794776 kernel: audit: type=1400 audit(1696275098.788:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.801984 kernel: audit: type=1400 audit(1696275098.788:433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810526 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:31:38.810587 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.793000 audit: BPF prog-id=55 op=LOAD Oct 2 19:31:38.794000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit: BPF prog-id=56 op=LOAD Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.794000 audit: BPF prog-id=57 op=LOAD Oct 2 19:31:38.794000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:31:38.794000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.795000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.800000 audit: BPF prog-id=58 op=LOAD Oct 2 19:31:38.800000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit: BPF prog-id=59 op=LOAD Oct 2 19:31:38.805000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit: BPF prog-id=61 op=LOAD Oct 2 19:31:38.810000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:31:38.810000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.811000 audit: BPF prog-id=62 op=LOAD Oct 2 19:31:38.811000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.814000 audit: BPF prog-id=63 op=LOAD Oct 2 19:31:38.814000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.816000 audit: BPF prog-id=64 op=LOAD Oct 2 19:31:38.816000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.817000 audit: BPF prog-id=65 op=LOAD Oct 2 19:31:38.818000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit: BPF prog-id=66 op=LOAD Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.818000 audit: BPF prog-id=67 op=LOAD Oct 2 19:31:38.818000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:31:38.818000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit: BPF prog-id=68 op=LOAD Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:38.821000 audit: BPF prog-id=69 op=LOAD Oct 2 19:31:38.821000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:31:38.821000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:31:38.856849 systemd[1]: Started kubelet.service. Oct 2 19:31:38.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:38.974559 kubelet[2398]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:31:38.974559 kubelet[2398]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:31:38.974559 kubelet[2398]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:31:38.976483 kubelet[2398]: I1002 19:31:38.976331 2398 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:31:38.980644 kubelet[2398]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:31:38.980644 kubelet[2398]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:31:38.980644 kubelet[2398]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:31:39.837270 kubelet[2398]: I1002 19:31:39.837138 2398 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:31:39.837593 kubelet[2398]: I1002 19:31:39.837573 2398 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:31:39.838318 kubelet[2398]: I1002 19:31:39.838284 2398 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:31:39.848792 kubelet[2398]: E1002 19:31:39.848762 2398 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.28.204:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.849087 kubelet[2398]: I1002 19:31:39.849069 2398 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:31:39.851624 kubelet[2398]: I1002 19:31:39.851495 2398 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:31:39.852009 kubelet[2398]: I1002 19:31:39.851894 2398 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:31:39.852109 kubelet[2398]: I1002 19:31:39.852085 2398 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:31:39.852231 kubelet[2398]: I1002 19:31:39.852113 2398 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:31:39.852231 kubelet[2398]: I1002 19:31:39.852133 2398 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:31:39.852319 kubelet[2398]: I1002 19:31:39.852269 2398 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:31:39.856820 kubelet[2398]: I1002 19:31:39.856792 2398 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:31:39.856820 kubelet[2398]: I1002 19:31:39.856816 2398 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:31:39.857041 kubelet[2398]: I1002 19:31:39.856841 2398 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:31:39.857041 kubelet[2398]: I1002 19:31:39.856855 2398 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:31:39.866950 kubelet[2398]: W1002 19:31:39.866675 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.31.28.204:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-204&limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.866950 kubelet[2398]: E1002 19:31:39.866774 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.204:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-204&limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.867933 kubelet[2398]: W1002 19:31:39.867891 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.31.28.204:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.868089 kubelet[2398]: E1002 19:31:39.867944 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.28.204:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.868089 kubelet[2398]: I1002 19:31:39.867997 2398 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:31:39.868970 kubelet[2398]: W1002 19:31:39.868947 2398 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:31:39.869403 kubelet[2398]: I1002 19:31:39.869383 2398 server.go:1175] "Started kubelet" Oct 2 19:31:39.870006 kubelet[2398]: I1002 19:31:39.869989 2398 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:31:39.871232 kubelet[2398]: I1002 19:31:39.871211 2398 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:31:39.882915 kubelet[2398]: E1002 19:31:39.874631 2398 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-28-204.178a6137510d98a0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-28-204", UID:"ip-172-31-28-204", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-28-204"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 31, 39, 869354144, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 31, 39, 869354144, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.28.204:6443/api/v1/namespaces/default/events": dial tcp 172.31.28.204:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:31:39.892419 kernel: kauditd_printk_skb: 171 callbacks suppressed Oct 2 19:31:39.892558 kernel: audit: type=1400 audit(1696275099.882:604): avc: denied { mac_admin } for pid=2398 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:39.882000 audit[2398]: AVC avc: denied { mac_admin } for pid=2398 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:39.893869 kubelet[2398]: I1002 19:31:39.883214 2398 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:31:39.893869 kubelet[2398]: I1002 19:31:39.883274 2398 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:31:39.893869 kubelet[2398]: I1002 19:31:39.883926 2398 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:31:39.893869 kubelet[2398]: I1002 19:31:39.891133 2398 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:31:39.893869 kubelet[2398]: I1002 19:31:39.891235 2398 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:31:39.893869 kubelet[2398]: W1002 19:31:39.891752 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.31.28.204:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.893869 kubelet[2398]: E1002 19:31:39.891816 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.28.204:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.893869 kubelet[2398]: E1002 19:31:39.892031 2398 controller.go:144] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.28.204:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-204?timeout=10s": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:39.896333 kubelet[2398]: E1002 19:31:39.896305 2398 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:39.882000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:39.908028 kernel: audit: type=1401 audit(1696275099.882:604): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:39.908158 kernel: audit: type=1300 audit(1696275099.882:604): arch=c000003e syscall=188 success=no exit=-22 a0=c000b5fd10 a1=c000b61ea8 a2=c000b5fce0 a3=25 items=0 ppid=1 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.882000 audit[2398]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b5fd10 a1=c000b61ea8 a2=c000b5fce0 a3=25 items=0 ppid=1 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.908440 kubelet[2398]: E1002 19:31:39.904175 2398 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:31:39.908440 kubelet[2398]: E1002 19:31:39.904209 2398 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:31:39.882000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:39.923391 kernel: audit: type=1327 audit(1696275099.882:604): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:39.923516 kernel: audit: type=1400 audit(1696275099.882:605): avc: denied { mac_admin } for pid=2398 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:39.882000 audit[2398]: AVC avc: denied { mac_admin } for pid=2398 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:39.882000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:39.935177 kernel: audit: type=1401 audit(1696275099.882:605): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:39.935320 kernel: audit: type=1300 audit(1696275099.882:605): arch=c000003e syscall=188 success=no exit=-22 a0=c000b7f240 a1=c000b61ec0 a2=c000b5fda0 a3=25 items=0 ppid=1 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.882000 audit[2398]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b7f240 a1=c000b61ec0 a2=c000b5fda0 a3=25 items=0 ppid=1 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.943282 kernel: audit: type=1327 audit(1696275099.882:605): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:39.882000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:39.909000 audit[2411]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.909000 audit[2411]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd38ad7370 a2=0 a3=7ffd38ad735c items=0 ppid=2398 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.956041 kernel: audit: type=1325 audit(1696275099.909:606): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.956202 kernel: audit: type=1300 audit(1696275099.909:606): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd38ad7370 a2=0 a3=7ffd38ad735c items=0 ppid=2398 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:31:39.922000 audit[2412]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.922000 audit[2412]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc7ced6b0 a2=0 a3=7fffc7ced69c items=0 ppid=2398 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.922000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:31:39.942000 audit[2415]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.942000 audit[2415]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd044f1c60 a2=0 a3=7ffd044f1c4c items=0 ppid=2398 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.942000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:31:39.950000 audit[2417]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.950000 audit[2417]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcd87c2520 a2=0 a3=7ffcd87c250c items=0 ppid=2398 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.950000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:31:39.960062 kubelet[2398]: I1002 19:31:39.960039 2398 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:31:39.960062 kubelet[2398]: I1002 19:31:39.960059 2398 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:31:39.960398 kubelet[2398]: I1002 19:31:39.960079 2398 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:31:39.963000 audit[2420]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.963000 audit[2420]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffff93f7060 a2=0 a3=7ffff93f704c items=0 ppid=2398 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.963000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:31:39.966581 kubelet[2398]: I1002 19:31:39.963706 2398 policy_none.go:49] "None policy: Start" Oct 2 19:31:39.967664 kubelet[2398]: I1002 19:31:39.967642 2398 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:31:39.967955 kubelet[2398]: I1002 19:31:39.967943 2398 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:31:39.967000 audit[2422]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.967000 audit[2422]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc2a7f96d0 a2=0 a3=7ffc2a7f96bc items=0 ppid=2398 pid=2422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.967000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:31:39.977742 systemd[1]: Created slice kubepods.slice. Oct 2 19:31:39.979000 audit[2426]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.979000 audit[2426]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffde5a11eb0 a2=0 a3=7ffde5a11e9c items=0 ppid=2398 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.979000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:31:39.985000 audit[2429]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.985000 audit[2429]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd668e5700 a2=0 a3=7ffd668e56ec items=0 ppid=2398 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.985000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:31:39.986000 audit[2430]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.986000 audit[2430]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff77de34b0 a2=0 a3=7fff77de349c items=0 ppid=2398 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.986000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:31:39.988000 audit[2431]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2431 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.988000 audit[2431]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc4378cd70 a2=0 a3=7ffc4378cd5c items=0 ppid=2398 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:31:39.990000 audit[2433]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.990000 audit[2433]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffe8083220 a2=0 a3=7fffe808320c items=0 ppid=2398 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.990000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:31:39.993000 audit[2435]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:39.993000 audit[2435]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffee22e1770 a2=0 a3=7ffee22e175c items=0 ppid=2398 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:39.993000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:31:40.005402 kubelet[2398]: E1002 19:31:39.996699 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.006000 audit[2437]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:40.006000 audit[2437]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe3f9c47a0 a2=0 a3=7ffe3f9c478c items=0 ppid=2398 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.006000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:31:40.023175 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:31:40.023867 kubelet[2398]: I1002 19:31:40.023804 2398 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-204" Oct 2 19:31:40.024947 kubelet[2398]: E1002 19:31:40.024924 2398 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.204:6443/api/v1/nodes\": dial tcp 172.31.28.204:6443: connect: connection refused" node="ip-172-31-28-204" Oct 2 19:31:40.030259 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:31:40.032000 audit[2441]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:40.032000 audit[2441]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffd07ab8bf0 a2=0 a3=7ffd07ab8bdc items=0 ppid=2398 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.032000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:31:40.037670 kubelet[2398]: I1002 19:31:40.037643 2398 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:31:40.039530 kubelet[2398]: I1002 19:31:40.039509 2398 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:31:40.038000 audit[2398]: AVC avc: denied { mac_admin } for pid=2398 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:40.038000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:40.038000 audit[2398]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c3b4a0 a1=c000f50930 a2=c000c3b470 a3=25 items=0 ppid=1 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.038000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:40.040847 kubelet[2398]: I1002 19:31:40.040828 2398 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:31:40.042857 kubelet[2398]: E1002 19:31:40.042834 2398 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.043000 audit[2443]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:40.043000 audit[2443]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffc416268a0 a2=0 a3=7ffc4162688c items=0 ppid=2398 pid=2443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.043000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:31:40.044770 kubelet[2398]: I1002 19:31:40.044753 2398 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:31:40.045000 audit[2444]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=2444 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.045000 audit[2444]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffedaf15fb0 a2=0 a3=7ffedaf15f9c items=0 ppid=2398 pid=2444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.045000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:31:40.046000 audit[2445]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:40.046000 audit[2445]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffecb3b8500 a2=0 a3=7ffecb3b84ec items=0 ppid=2398 pid=2445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.046000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:31:40.048000 audit[2446]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=2446 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.048000 audit[2446]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd77c185e0 a2=0 a3=7ffd77c185cc items=0 ppid=2398 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.048000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:31:40.049000 audit[2447]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:40.049000 audit[2447]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdae938c00 a2=0 a3=7ffdae938bec items=0 ppid=2398 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.049000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:31:40.051000 audit[2448]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:31:40.051000 audit[2448]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeb11744f0 a2=0 a3=7ffeb11744dc items=0 ppid=2398 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.051000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:31:40.053000 audit[2450]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2450 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.053000 audit[2450]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffda6b6df90 a2=0 a3=7ffda6b6df7c items=0 ppid=2398 pid=2450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.053000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:31:40.069000 audit[2451]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2451 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.069000 audit[2451]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffff9295de0 a2=0 a3=7ffff9295dcc items=0 ppid=2398 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.069000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:31:40.074000 audit[2453]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2453 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.074000 audit[2453]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fffef885020 a2=0 a3=7fffef88500c items=0 ppid=2398 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.074000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:31:40.077000 audit[2454]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2454 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.077000 audit[2454]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe22e0bd90 a2=0 a3=7ffe22e0bd7c items=0 ppid=2398 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.077000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:31:40.079000 audit[2455]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2455 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.079000 audit[2455]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc467d1f70 a2=0 a3=7ffc467d1f5c items=0 ppid=2398 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.079000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:31:40.083000 audit[2457]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2457 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.083000 audit[2457]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffdf13b5d20 a2=0 a3=7ffdf13b5d0c items=0 ppid=2398 pid=2457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.083000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:31:40.087000 audit[2459]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2459 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.087000 audit[2459]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd47b81690 a2=0 a3=7ffd47b8167c items=0 ppid=2398 pid=2459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.087000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:31:40.093660 kubelet[2398]: E1002 19:31:40.093618 2398 controller.go:144] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.28.204:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-204?timeout=10s": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.096000 audit[2461]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2461 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.096000 audit[2461]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7fff42bba010 a2=0 a3=7fff42bb9ffc items=0 ppid=2398 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:31:40.099000 audit[2463]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2463 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.099000 audit[2463]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffcb66a01a0 a2=0 a3=7ffcb66a018c items=0 ppid=2398 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.099000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:31:40.105850 kubelet[2398]: E1002 19:31:40.105786 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.109000 audit[2465]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2465 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.109000 audit[2465]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7fff76385890 a2=0 a3=7fff7638587c items=0 ppid=2398 pid=2465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.109000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:31:40.110742 kubelet[2398]: I1002 19:31:40.110696 2398 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:31:40.110833 kubelet[2398]: I1002 19:31:40.110750 2398 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:31:40.110833 kubelet[2398]: I1002 19:31:40.110778 2398 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:31:40.111308 kubelet[2398]: E1002 19:31:40.110942 2398 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:31:40.112000 audit[2466]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2466 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.112000 audit[2466]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe410eef70 a2=0 a3=7ffe410eef5c items=0 ppid=2398 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.112000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:31:40.114042 kubelet[2398]: W1002 19:31:40.113057 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.31.28.204:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.114198 kubelet[2398]: E1002 19:31:40.114065 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.28.204:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.114000 audit[2467]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2467 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.114000 audit[2467]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd91290880 a2=0 a3=7ffd9129086c items=0 ppid=2398 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.114000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:31:40.116000 audit[2468]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2468 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:31:40.116000 audit[2468]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffdee074c0 a2=0 a3=7fffdee074ac items=0 ppid=2398 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:40.116000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:31:40.207229 kubelet[2398]: E1002 19:31:40.207182 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.211550 kubelet[2398]: I1002 19:31:40.211410 2398 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:31:40.213915 kubelet[2398]: I1002 19:31:40.213887 2398 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:31:40.215587 kubelet[2398]: I1002 19:31:40.215563 2398 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:31:40.217929 kubelet[2398]: I1002 19:31:40.217794 2398 status_manager.go:667] "Failed to get status for pod" podUID=6fad20dd433c4de15babcc49c0fe812a pod="kube-system/kube-apiserver-ip-172-31-28-204" err="Get \"https://172.31.28.204:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-28-204\": dial tcp 172.31.28.204:6443: connect: connection refused" Oct 2 19:31:40.219647 kubelet[2398]: I1002 19:31:40.219626 2398 status_manager.go:667] "Failed to get status for pod" podUID=3f1b35b9eb7a25ad3aa1d34ed88667ca pod="kube-system/kube-controller-manager-ip-172-31-28-204" err="Get \"https://172.31.28.204:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-28-204\": dial tcp 172.31.28.204:6443: connect: connection refused" Oct 2 19:31:40.221567 kubelet[2398]: I1002 19:31:40.221548 2398 status_manager.go:667] "Failed to get status for pod" podUID=20e396a83ffd2a3898dc15042f3c5e8f pod="kube-system/kube-scheduler-ip-172-31-28-204" err="Get \"https://172.31.28.204:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-28-204\": dial tcp 172.31.28.204:6443: connect: connection refused" Oct 2 19:31:40.223870 systemd[1]: Created slice kubepods-burstable-pod6fad20dd433c4de15babcc49c0fe812a.slice. Oct 2 19:31:40.228685 kubelet[2398]: I1002 19:31:40.228651 2398 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-204" Oct 2 19:31:40.229121 kubelet[2398]: E1002 19:31:40.229080 2398 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.204:6443/api/v1/nodes\": dial tcp 172.31.28.204:6443: connect: connection refused" node="ip-172-31-28-204" Oct 2 19:31:40.237894 systemd[1]: Created slice kubepods-burstable-pod3f1b35b9eb7a25ad3aa1d34ed88667ca.slice. Oct 2 19:31:40.260232 systemd[1]: Created slice kubepods-burstable-pod20e396a83ffd2a3898dc15042f3c5e8f.slice. Oct 2 19:31:40.307569 kubelet[2398]: E1002 19:31:40.307535 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.315004 kubelet[2398]: I1002 19:31:40.314964 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-k8s-certs\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:40.315004 kubelet[2398]: I1002 19:31:40.315023 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-kubeconfig\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:40.315382 kubelet[2398]: I1002 19:31:40.315060 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:40.315382 kubelet[2398]: I1002 19:31:40.315092 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6fad20dd433c4de15babcc49c0fe812a-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-28-204\" (UID: \"6fad20dd433c4de15babcc49c0fe812a\") " pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:40.315382 kubelet[2398]: I1002 19:31:40.315187 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-ca-certs\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:40.315382 kubelet[2398]: I1002 19:31:40.315219 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:40.315382 kubelet[2398]: I1002 19:31:40.315306 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20e396a83ffd2a3898dc15042f3c5e8f-kubeconfig\") pod \"kube-scheduler-ip-172-31-28-204\" (UID: \"20e396a83ffd2a3898dc15042f3c5e8f\") " pod="kube-system/kube-scheduler-ip-172-31-28-204" Oct 2 19:31:40.315632 kubelet[2398]: I1002 19:31:40.315339 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6fad20dd433c4de15babcc49c0fe812a-ca-certs\") pod \"kube-apiserver-ip-172-31-28-204\" (UID: \"6fad20dd433c4de15babcc49c0fe812a\") " pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:40.315632 kubelet[2398]: I1002 19:31:40.315374 2398 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6fad20dd433c4de15babcc49c0fe812a-k8s-certs\") pod \"kube-apiserver-ip-172-31-28-204\" (UID: \"6fad20dd433c4de15babcc49c0fe812a\") " pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:40.408578 kubelet[2398]: E1002 19:31:40.408461 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.494436 kubelet[2398]: E1002 19:31:40.494392 2398 controller.go:144] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.28.204:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-204?timeout=10s": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.508600 kubelet[2398]: E1002 19:31:40.508559 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.536080 env[1634]: time="2023-10-02T19:31:40.536021925Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-28-204,Uid:6fad20dd433c4de15babcc49c0fe812a,Namespace:kube-system,Attempt:0,}" Oct 2 19:31:40.552165 env[1634]: time="2023-10-02T19:31:40.552114061Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-28-204,Uid:3f1b35b9eb7a25ad3aa1d34ed88667ca,Namespace:kube-system,Attempt:0,}" Oct 2 19:31:40.569248 env[1634]: time="2023-10-02T19:31:40.569197788Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-28-204,Uid:20e396a83ffd2a3898dc15042f3c5e8f,Namespace:kube-system,Attempt:0,}" Oct 2 19:31:40.609558 kubelet[2398]: E1002 19:31:40.609523 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.645027 kubelet[2398]: I1002 19:31:40.644897 2398 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-204" Oct 2 19:31:40.646755 kubelet[2398]: E1002 19:31:40.646717 2398 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.204:6443/api/v1/nodes\": dial tcp 172.31.28.204:6443: connect: connection refused" node="ip-172-31-28-204" Oct 2 19:31:40.711084 kubelet[2398]: E1002 19:31:40.710955 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.811554 kubelet[2398]: E1002 19:31:40.811516 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:40.831443 kubelet[2398]: W1002 19:31:40.831370 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.31.28.204:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-204&limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.831443 kubelet[2398]: E1002 19:31:40.831448 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.204:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-204&limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.831661 kubelet[2398]: W1002 19:31:40.831510 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.31.28.204:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.831661 kubelet[2398]: E1002 19:31:40.831543 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.28.204:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:40.912335 kubelet[2398]: E1002 19:31:40.912287 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.012971 kubelet[2398]: E1002 19:31:41.012924 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.113140 kubelet[2398]: E1002 19:31:41.113047 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.213558 kubelet[2398]: E1002 19:31:41.213516 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.234868 kubelet[2398]: W1002 19:31:41.234801 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.31.28.204:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:41.234868 kubelet[2398]: E1002 19:31:41.234861 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.28.204:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:41.295926 kubelet[2398]: E1002 19:31:41.295811 2398 controller.go:144] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.28.204:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-204?timeout=10s": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:41.313898 kubelet[2398]: E1002 19:31:41.313852 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.374282 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3203635183.mount: Deactivated successfully. Oct 2 19:31:41.383220 env[1634]: time="2023-10-02T19:31:41.382873206Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.390830 env[1634]: time="2023-10-02T19:31:41.390196410Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.392478 env[1634]: time="2023-10-02T19:31:41.392441930Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.398238 env[1634]: time="2023-10-02T19:31:41.398194237Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.399742 env[1634]: time="2023-10-02T19:31:41.399403985Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.402414 env[1634]: time="2023-10-02T19:31:41.402372603Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.404280 env[1634]: time="2023-10-02T19:31:41.404239877Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.405211 env[1634]: time="2023-10-02T19:31:41.405175460Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.407187 env[1634]: time="2023-10-02T19:31:41.407031336Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.409776 env[1634]: time="2023-10-02T19:31:41.409718814Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.412400 env[1634]: time="2023-10-02T19:31:41.412288810Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.414339 kubelet[2398]: E1002 19:31:41.414306 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.419780 env[1634]: time="2023-10-02T19:31:41.419709371Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:31:41.456149 kubelet[2398]: I1002 19:31:41.455494 2398 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-204" Oct 2 19:31:41.457776 kubelet[2398]: E1002 19:31:41.457750 2398 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.204:6443/api/v1/nodes\": dial tcp 172.31.28.204:6443: connect: connection refused" node="ip-172-31-28-204" Oct 2 19:31:41.478040 env[1634]: time="2023-10-02T19:31:41.474937888Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:31:41.478040 env[1634]: time="2023-10-02T19:31:41.475061635Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:31:41.478040 env[1634]: time="2023-10-02T19:31:41.475189159Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:31:41.478040 env[1634]: time="2023-10-02T19:31:41.475363507Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/344eb82abdff55a38d5e0f6583ddc4dbcb9e57195f57887597c8632587d496e9 pid=2476 runtime=io.containerd.runc.v2 Oct 2 19:31:41.515607 kubelet[2398]: E1002 19:31:41.515358 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.516186 env[1634]: time="2023-10-02T19:31:41.516109985Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:31:41.516387 env[1634]: time="2023-10-02T19:31:41.516206079Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:31:41.516387 env[1634]: time="2023-10-02T19:31:41.516238862Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:31:41.516783 env[1634]: time="2023-10-02T19:31:41.516624258Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d7856228e7f315d5620705748b3527dec291101d685cde6e76b39022b7d9faaf pid=2493 runtime=io.containerd.runc.v2 Oct 2 19:31:41.526423 systemd[1]: Started cri-containerd-344eb82abdff55a38d5e0f6583ddc4dbcb9e57195f57887597c8632587d496e9.scope. Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.590000 audit: BPF prog-id=70 op=LOAD Oct 2 19:31:41.590000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.590000 audit[2495]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2476 pid=2495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.590000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346562383261626466663535613338643565306636353833646463 Oct 2 19:31:41.592000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.592000 audit[2495]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2476 pid=2495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346562383261626466663535613338643565306636353833646463 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.594000 audit: BPF prog-id=71 op=LOAD Oct 2 19:31:41.594000 audit[2495]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ac7b0 items=0 ppid=2476 pid=2495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.594000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346562383261626466663535613338643565306636353833646463 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit: BPF prog-id=72 op=LOAD Oct 2 19:31:41.596000 audit[2495]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ac7f8 items=0 ppid=2476 pid=2495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346562383261626466663535613338643565306636353833646463 Oct 2 19:31:41.596000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:31:41.596000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { perfmon } for pid=2495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit[2495]: AVC avc: denied { bpf } for pid=2495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.596000 audit: BPF prog-id=73 op=LOAD Oct 2 19:31:41.596000 audit[2495]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003acc08 items=0 ppid=2476 pid=2495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334346562383261626466663535613338643565306636353833646463 Oct 2 19:31:41.601343 env[1634]: time="2023-10-02T19:31:41.600929393Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:31:41.603076 env[1634]: time="2023-10-02T19:31:41.602855085Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:31:41.603258 env[1634]: time="2023-10-02T19:31:41.603083764Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:31:41.604792 env[1634]: time="2023-10-02T19:31:41.603585263Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec014461e397a55ee46759a5784c9c10f2b5976fba4cfcf4dd9e01d8d04fc2f3 pid=2522 runtime=io.containerd.runc.v2 Oct 2 19:31:41.615635 kubelet[2398]: E1002 19:31:41.615557 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.622300 systemd[1]: Started cri-containerd-d7856228e7f315d5620705748b3527dec291101d685cde6e76b39022b7d9faaf.scope. Oct 2 19:31:41.654910 kubelet[2398]: W1002 19:31:41.654822 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.31.28.204:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:41.654910 kubelet[2398]: E1002 19:31:41.654868 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.28.204:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:41.682979 env[1634]: time="2023-10-02T19:31:41.682923908Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-28-204,Uid:3f1b35b9eb7a25ad3aa1d34ed88667ca,Namespace:kube-system,Attempt:0,} returns sandbox id \"344eb82abdff55a38d5e0f6583ddc4dbcb9e57195f57887597c8632587d496e9\"" Oct 2 19:31:41.689887 systemd[1]: Started cri-containerd-ec014461e397a55ee46759a5784c9c10f2b5976fba4cfcf4dd9e01d8d04fc2f3.scope. Oct 2 19:31:41.716396 kubelet[2398]: E1002 19:31:41.716358 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.728465 env[1634]: time="2023-10-02T19:31:41.728420808Z" level=info msg="CreateContainer within sandbox \"344eb82abdff55a38d5e0f6583ddc4dbcb9e57195f57887597c8632587d496e9\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.731000 audit: BPF prog-id=74 op=LOAD Oct 2 19:31:41.731000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.731000 audit[2545]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2522 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303134343631653339376135356565343637353961353738346339 Oct 2 19:31:41.731000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.731000 audit[2545]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2522 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.731000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303134343631653339376135356565343637353961353738346339 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit: BPF prog-id=75 op=LOAD Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.733000 audit: BPF prog-id=76 op=LOAD Oct 2 19:31:41.733000 audit[2545]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003a2500 items=0 ppid=2522 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303134343631653339376135356565343637353961353738346339 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.734000 audit: BPF prog-id=77 op=LOAD Oct 2 19:31:41.734000 audit[2545]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003a2548 items=0 ppid=2522 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303134343631653339376135356565343637353961353738346339 Oct 2 19:31:41.734000 audit: BPF prog-id=77 op=UNLOAD Oct 2 19:31:41.734000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.735000 audit: BPF prog-id=78 op=LOAD Oct 2 19:31:41.735000 audit[2545]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003a2958 items=0 ppid=2522 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303134343631653339376135356565343637353961353738346339 Oct 2 19:31:41.737000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.737000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2493 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.737000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383536323238653766333135643536323037303537343862333532 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2493 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383536323238653766333135643536323037303537343862333532 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.738000 audit: BPF prog-id=79 op=LOAD Oct 2 19:31:41.738000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000219170 items=0 ppid=2493 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383536323238653766333135643536323037303537343862333532 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit: BPF prog-id=80 op=LOAD Oct 2 19:31:41.739000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002191b8 items=0 ppid=2493 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383536323238653766333135643536323037303537343862333532 Oct 2 19:31:41.739000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:31:41.739000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.739000 audit: BPF prog-id=81 op=LOAD Oct 2 19:31:41.739000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002195c8 items=0 ppid=2493 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.739000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437383536323238653766333135643536323037303537343862333532 Oct 2 19:31:41.795098 env[1634]: time="2023-10-02T19:31:41.795045862Z" level=info msg="CreateContainer within sandbox \"344eb82abdff55a38d5e0f6583ddc4dbcb9e57195f57887597c8632587d496e9\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f\"" Oct 2 19:31:41.796082 env[1634]: time="2023-10-02T19:31:41.796047585Z" level=info msg="StartContainer for \"3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f\"" Oct 2 19:31:41.796787 env[1634]: time="2023-10-02T19:31:41.796480984Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-28-204,Uid:20e396a83ffd2a3898dc15042f3c5e8f,Namespace:kube-system,Attempt:0,} returns sandbox id \"ec014461e397a55ee46759a5784c9c10f2b5976fba4cfcf4dd9e01d8d04fc2f3\"" Oct 2 19:31:41.800175 env[1634]: time="2023-10-02T19:31:41.800139356Z" level=info msg="CreateContainer within sandbox \"ec014461e397a55ee46759a5784c9c10f2b5976fba4cfcf4dd9e01d8d04fc2f3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:31:41.809829 env[1634]: time="2023-10-02T19:31:41.809786213Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-28-204,Uid:6fad20dd433c4de15babcc49c0fe812a,Namespace:kube-system,Attempt:0,} returns sandbox id \"d7856228e7f315d5620705748b3527dec291101d685cde6e76b39022b7d9faaf\"" Oct 2 19:31:41.814409 env[1634]: time="2023-10-02T19:31:41.814372876Z" level=info msg="CreateContainer within sandbox \"d7856228e7f315d5620705748b3527dec291101d685cde6e76b39022b7d9faaf\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:31:41.817059 kubelet[2398]: E1002 19:31:41.817017 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.855703 env[1634]: time="2023-10-02T19:31:41.855552758Z" level=info msg="CreateContainer within sandbox \"ec014461e397a55ee46759a5784c9c10f2b5976fba4cfcf4dd9e01d8d04fc2f3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a\"" Oct 2 19:31:41.862916 systemd[1]: Started cri-containerd-3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f.scope. Oct 2 19:31:41.867028 kubelet[2398]: E1002 19:31:41.866985 2398 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.28.204:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:41.867867 env[1634]: time="2023-10-02T19:31:41.867564391Z" level=info msg="StartContainer for \"01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a\"" Oct 2 19:31:41.891110 env[1634]: time="2023-10-02T19:31:41.891054029Z" level=info msg="CreateContainer within sandbox \"d7856228e7f315d5620705748b3527dec291101d685cde6e76b39022b7d9faaf\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2add058fb7d5e0e18bab9a5e57b52e272483329f0d3076b3ed659eac7be21602\"" Oct 2 19:31:41.891918 env[1634]: time="2023-10-02T19:31:41.891884733Z" level=info msg="StartContainer for \"2add058fb7d5e0e18bab9a5e57b52e272483329f0d3076b3ed659eac7be21602\"" Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.907000 audit: BPF prog-id=82 op=LOAD Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2476 pid=2600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361636664333864646663613530373033643537363231343762333039 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2476 pid=2600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361636664333864646663613530373033643537363231343762333039 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit: BPF prog-id=83 op=LOAD Oct 2 19:31:41.908000 audit[2600]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000308580 items=0 ppid=2476 pid=2600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361636664333864646663613530373033643537363231343762333039 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit: BPF prog-id=84 op=LOAD Oct 2 19:31:41.908000 audit[2600]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003085c8 items=0 ppid=2476 pid=2600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361636664333864646663613530373033643537363231343762333039 Oct 2 19:31:41.908000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:31:41.908000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { perfmon } for pid=2600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit[2600]: AVC avc: denied { bpf } for pid=2600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.908000 audit: BPF prog-id=85 op=LOAD Oct 2 19:31:41.908000 audit[2600]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003089d8 items=0 ppid=2476 pid=2600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361636664333864646663613530373033643537363231343762333039 Oct 2 19:31:41.918139 systemd[1]: Started cri-containerd-01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a.scope. Oct 2 19:31:41.922840 kubelet[2398]: E1002 19:31:41.922815 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:41.938131 systemd[1]: Started cri-containerd-2add058fb7d5e0e18bab9a5e57b52e272483329f0d3076b3ed659eac7be21602.scope. Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.988000 audit: BPF prog-id=86 op=LOAD Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2522 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031666130356436656638363937326663333866333666333933616464 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2522 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031666130356436656638363937326663333866333666333933616464 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit: BPF prog-id=87 op=LOAD Oct 2 19:31:41.989000 audit[2630]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000218600 items=0 ppid=2522 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031666130356436656638363937326663333866333666333933616464 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.989000 audit: BPF prog-id=88 op=LOAD Oct 2 19:31:41.989000 audit[2630]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000218648 items=0 ppid=2522 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031666130356436656638363937326663333866333666333933616464 Oct 2 19:31:41.990000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:31:41.990000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { perfmon } for pid=2630 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit[2630]: AVC avc: denied { bpf } for pid=2630 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:41.990000 audit: BPF prog-id=89 op=LOAD Oct 2 19:31:41.990000 audit[2630]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000218a58 items=0 ppid=2522 pid=2630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:41.990000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031666130356436656638363937326663333866333666333933616464 Oct 2 19:31:42.003255 env[1634]: time="2023-10-02T19:31:42.003199382Z" level=info msg="StartContainer for \"3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f\" returns successfully" Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.011000 audit: BPF prog-id=90 op=LOAD Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000151c48 a2=10 a3=1c items=0 ppid=2493 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:42.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646430353866623764356530653138626162396135653537623532 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001516b0 a2=3c a3=8 items=0 ppid=2493 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:42.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646430353866623764356530653138626162396135653537623532 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.013000 audit: BPF prog-id=91 op=LOAD Oct 2 19:31:42.013000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001519d8 a2=78 a3=c000280380 items=0 ppid=2493 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:42.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646430353866623764356530653138626162396135653537623532 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit: BPF prog-id=92 op=LOAD Oct 2 19:31:42.014000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000151770 a2=78 a3=c0002803c8 items=0 ppid=2493 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:42.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646430353866623764356530653138626162396135653537623532 Oct 2 19:31:42.014000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:31:42.014000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { perfmon } for pid=2636 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit[2636]: AVC avc: denied { bpf } for pid=2636 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:42.014000 audit: BPF prog-id=93 op=LOAD Oct 2 19:31:42.014000 audit[2636]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000151c30 a2=78 a3=c0002807d8 items=0 ppid=2493 pid=2636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:42.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261646430353866623764356530653138626162396135653537623532 Oct 2 19:31:42.023480 kubelet[2398]: E1002 19:31:42.023420 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.123818 env[1634]: time="2023-10-02T19:31:42.123639908Z" level=info msg="StartContainer for \"01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a\" returns successfully" Oct 2 19:31:42.124046 kubelet[2398]: E1002 19:31:42.123994 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.135406 env[1634]: time="2023-10-02T19:31:42.135299584Z" level=info msg="StartContainer for \"2add058fb7d5e0e18bab9a5e57b52e272483329f0d3076b3ed659eac7be21602\" returns successfully" Oct 2 19:31:42.143174 kubelet[2398]: I1002 19:31:42.143143 2398 status_manager.go:667] "Failed to get status for pod" podUID=20e396a83ffd2a3898dc15042f3c5e8f pod="kube-system/kube-scheduler-ip-172-31-28-204" err="Get \"https://172.31.28.204:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-28-204\": dial tcp 172.31.28.204:6443: connect: connection refused" Oct 2 19:31:42.151369 kubelet[2398]: I1002 19:31:42.151332 2398 status_manager.go:667] "Failed to get status for pod" podUID=6fad20dd433c4de15babcc49c0fe812a pod="kube-system/kube-apiserver-ip-172-31-28-204" err="Get \"https://172.31.28.204:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-28-204\": dial tcp 172.31.28.204:6443: connect: connection refused" Oct 2 19:31:42.154480 kubelet[2398]: I1002 19:31:42.154423 2398 status_manager.go:667] "Failed to get status for pod" podUID=3f1b35b9eb7a25ad3aa1d34ed88667ca pod="kube-system/kube-controller-manager-ip-172-31-28-204" err="Get \"https://172.31.28.204:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-28-204\": dial tcp 172.31.28.204:6443: connect: connection refused" Oct 2 19:31:42.224540 kubelet[2398]: E1002 19:31:42.224478 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.324771 kubelet[2398]: E1002 19:31:42.324685 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.425412 kubelet[2398]: E1002 19:31:42.425242 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.525671 kubelet[2398]: E1002 19:31:42.525631 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.626311 kubelet[2398]: E1002 19:31:42.626268 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.727074 kubelet[2398]: E1002 19:31:42.726963 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.795109 kubelet[2398]: E1002 19:31:42.794985 2398 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-28-204.178a6137510d98a0", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-28-204", UID:"ip-172-31-28-204", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-28-204"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 31, 39, 869354144, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 31, 39, 869354144, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.28.204:6443/api/v1/namespaces/default/events": dial tcp 172.31.28.204:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:31:42.827605 kubelet[2398]: E1002 19:31:42.827310 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.855736 kubelet[2398]: W1002 19:31:42.855653 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.31.28.204:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-204&limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:42.855736 kubelet[2398]: E1002 19:31:42.855744 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.204:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-204&limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:42.896369 kubelet[2398]: E1002 19:31:42.896319 2398 controller.go:144] failed to ensure lease exists, will retry in 3.2s, error: Get "https://172.31.28.204:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-204?timeout=10s": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:42.928587 kubelet[2398]: E1002 19:31:42.928545 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:42.950669 kubelet[2398]: W1002 19:31:42.950597 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.31.28.204:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:42.950669 kubelet[2398]: E1002 19:31:42.950674 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.28.204:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:43.029203 kubelet[2398]: E1002 19:31:43.029161 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.060324 kubelet[2398]: I1002 19:31:43.060294 2398 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-204" Oct 2 19:31:43.060803 kubelet[2398]: E1002 19:31:43.060782 2398 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.204:6443/api/v1/nodes\": dial tcp 172.31.28.204:6443: connect: connection refused" node="ip-172-31-28-204" Oct 2 19:31:43.129480 kubelet[2398]: E1002 19:31:43.129418 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.229677 kubelet[2398]: E1002 19:31:43.229630 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.330458 kubelet[2398]: E1002 19:31:43.330329 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.392507 kubelet[2398]: W1002 19:31:43.392438 2398 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.31.28.204:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:43.392507 kubelet[2398]: E1002 19:31:43.392511 2398 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.28.204:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.204:6443: connect: connection refused Oct 2 19:31:43.430856 kubelet[2398]: E1002 19:31:43.430808 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.531522 kubelet[2398]: E1002 19:31:43.531485 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.632485 kubelet[2398]: E1002 19:31:43.632369 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.659000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:43.659000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000058a80 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:43.659000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:43.660000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:43.660000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00037e2e0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:43.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:43.733456 kubelet[2398]: E1002 19:31:43.733381 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.833776 kubelet[2398]: E1002 19:31:43.833713 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:43.934970 kubelet[2398]: E1002 19:31:43.934839 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.035820 kubelet[2398]: E1002 19:31:44.035765 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.136151 kubelet[2398]: E1002 19:31:44.136111 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.242527 kubelet[2398]: E1002 19:31:44.239080 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.345039 kubelet[2398]: E1002 19:31:44.345003 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.445598 kubelet[2398]: E1002 19:31:44.445563 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.546922 kubelet[2398]: E1002 19:31:44.546883 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.647889 kubelet[2398]: E1002 19:31:44.647852 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.750818 kubelet[2398]: E1002 19:31:44.748395 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.849114 kubelet[2398]: E1002 19:31:44.848975 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:44.949834 kubelet[2398]: E1002 19:31:44.949788 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.041269 kubelet[2398]: E1002 19:31:45.041243 2398 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:45.050383 kubelet[2398]: E1002 19:31:45.050337 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.151004 kubelet[2398]: E1002 19:31:45.150888 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.251417 kubelet[2398]: E1002 19:31:45.251367 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.352592 kubelet[2398]: E1002 19:31:45.352555 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.453203 kubelet[2398]: E1002 19:31:45.453084 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.553594 kubelet[2398]: E1002 19:31:45.553546 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.654611 kubelet[2398]: E1002 19:31:45.654568 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.755591 kubelet[2398]: E1002 19:31:45.755553 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.856645 kubelet[2398]: E1002 19:31:45.856361 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:45.957175 kubelet[2398]: E1002 19:31:45.957129 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.057653 kubelet[2398]: E1002 19:31:46.057246 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.159127 kubelet[2398]: E1002 19:31:46.159100 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.260637 kubelet[2398]: E1002 19:31:46.260595 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.263396 kubelet[2398]: I1002 19:31:46.263374 2398 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-204" Oct 2 19:31:46.362928 kubelet[2398]: E1002 19:31:46.362810 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.464033 kubelet[2398]: E1002 19:31:46.463994 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.564692 kubelet[2398]: E1002 19:31:46.564652 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.666032 kubelet[2398]: E1002 19:31:46.665879 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.767231 kubelet[2398]: E1002 19:31:46.767163 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.834000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.840742 kernel: kauditd_printk_skb: 449 callbacks suppressed Oct 2 19:31:46.840981 kernel: audit: type=1400 audit(1696275106.834:750): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.834000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c001776040 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.851110 kernel: audit: type=1300 audit(1696275106.834:750): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c001776040 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.857764 kernel: audit: type=1327 audit(1696275106.834:750): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.834000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.865277 kernel: audit: type=1400 audit(1696275106.834:751): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.834000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.876861 kernel: audit: type=1300 audit(1696275106.834:751): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0054da120 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.834000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0054da120 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.877154 kubelet[2398]: E1002 19:31:46.868578 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:46.885333 kernel: audit: type=1327 audit(1696275106.834:751): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.834000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.893229 kernel: audit: type=1400 audit(1696275106.836:752): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.836000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.902485 kernel: audit: type=1300 audit(1696275106.836:752): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0054da2d0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.836000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0054da2d0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.836000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.918327 kernel: audit: type=1327 audit(1696275106.836:752): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.918449 kernel: audit: type=1400 audit(1696275106.836:753): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.836000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.836000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0054da7e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.836000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.963000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.963000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c000ee4320 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.963000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.964000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:46.964000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c007d8e390 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:31:46.964000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:31:46.968698 kubelet[2398]: E1002 19:31:46.968667 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.069584 kubelet[2398]: E1002 19:31:47.069553 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.085411 kubelet[2398]: E1002 19:31:47.085375 2398 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-28-204\" not found" node="ip-172-31-28-204" Oct 2 19:31:47.169761 kubelet[2398]: I1002 19:31:47.169639 2398 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-28-204" Oct 2 19:31:47.169909 kubelet[2398]: E1002 19:31:47.169792 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.270542 kubelet[2398]: E1002 19:31:47.270496 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.371913 kubelet[2398]: E1002 19:31:47.371873 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.472541 kubelet[2398]: E1002 19:31:47.472430 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.573217 kubelet[2398]: E1002 19:31:47.573164 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.673746 kubelet[2398]: E1002 19:31:47.673698 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.774326 kubelet[2398]: E1002 19:31:47.774283 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.874992 kubelet[2398]: E1002 19:31:47.874944 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:47.975830 kubelet[2398]: E1002 19:31:47.975788 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:48.076475 kubelet[2398]: E1002 19:31:48.076362 2398 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:48.878349 kubelet[2398]: I1002 19:31:48.878305 2398 apiserver.go:52] "Watching apiserver" Oct 2 19:31:48.893798 kubelet[2398]: I1002 19:31:48.893760 2398 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:31:50.046265 kubelet[2398]: E1002 19:31:50.046205 2398 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:50.135798 systemd[1]: Reloading. Oct 2 19:31:50.307014 /usr/lib/systemd/system-generators/torcx-generator[2722]: time="2023-10-02T19:31:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:31:50.307052 /usr/lib/systemd/system-generators/torcx-generator[2722]: time="2023-10-02T19:31:50Z" level=info msg="torcx already run" Oct 2 19:31:50.430752 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:31:50.430776 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:31:50.464797 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.593000 audit: BPF prog-id=94 op=LOAD Oct 2 19:31:50.593000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit: BPF prog-id=95 op=LOAD Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.594000 audit: BPF prog-id=96 op=LOAD Oct 2 19:31:50.594000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:31:50.594000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.596000 audit: BPF prog-id=97 op=LOAD Oct 2 19:31:50.596000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.599000 audit: BPF prog-id=98 op=LOAD Oct 2 19:31:50.599000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.601000 audit: BPF prog-id=99 op=LOAD Oct 2 19:31:50.601000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.604000 audit: BPF prog-id=100 op=LOAD Oct 2 19:31:50.604000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:31:50.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit: BPF prog-id=101 op=LOAD Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.605000 audit: BPF prog-id=102 op=LOAD Oct 2 19:31:50.605000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:31:50.605000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.607000 audit: BPF prog-id=103 op=LOAD Oct 2 19:31:50.607000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.609000 audit: BPF prog-id=104 op=LOAD Oct 2 19:31:50.609000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.611000 audit: BPF prog-id=105 op=LOAD Oct 2 19:31:50.611000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.612000 audit: BPF prog-id=106 op=LOAD Oct 2 19:31:50.612000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.613000 audit: BPF prog-id=107 op=LOAD Oct 2 19:31:50.614000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.615000 audit: BPF prog-id=108 op=LOAD Oct 2 19:31:50.615000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit: BPF prog-id=109 op=LOAD Oct 2 19:31:50.617000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit: BPF prog-id=110 op=LOAD Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.617000 audit: BPF prog-id=111 op=LOAD Oct 2 19:31:50.617000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:31:50.617000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.618000 audit: BPF prog-id=112 op=LOAD Oct 2 19:31:50.618000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit: BPF prog-id=113 op=LOAD Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.622000 audit: BPF prog-id=114 op=LOAD Oct 2 19:31:50.622000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:31:50.622000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:31:50.643896 kubelet[2398]: I1002 19:31:50.642467 2398 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:31:50.642600 systemd[1]: Stopping kubelet.service... Oct 2 19:31:50.665237 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:31:50.665531 systemd[1]: Stopped kubelet.service. Oct 2 19:31:50.665692 systemd[1]: kubelet.service: Consumed 1.024s CPU time. Oct 2 19:31:50.664000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:50.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:50.668398 systemd[1]: Started kubelet.service. Oct 2 19:31:50.781827 kubelet[2774]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:31:50.781827 kubelet[2774]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:31:50.781827 kubelet[2774]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:31:50.782358 kubelet[2774]: I1002 19:31:50.781946 2774 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:31:50.783848 kubelet[2774]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 19:31:50.783848 kubelet[2774]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:31:50.783848 kubelet[2774]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:31:50.791185 kubelet[2774]: I1002 19:31:50.789878 2774 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 19:31:50.791185 kubelet[2774]: I1002 19:31:50.789911 2774 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:31:50.791473 kubelet[2774]: I1002 19:31:50.791337 2774 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 19:31:50.793717 kubelet[2774]: I1002 19:31:50.793688 2774 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:31:50.795664 kubelet[2774]: I1002 19:31:50.795518 2774 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:31:50.800463 kubelet[2774]: I1002 19:31:50.800267 2774 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:31:50.800613 kubelet[2774]: I1002 19:31:50.800519 2774 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:31:50.800735 kubelet[2774]: I1002 19:31:50.800607 2774 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 19:31:50.800735 kubelet[2774]: I1002 19:31:50.800688 2774 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:31:50.800735 kubelet[2774]: I1002 19:31:50.800711 2774 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 19:31:50.800971 kubelet[2774]: I1002 19:31:50.800780 2774 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:31:50.809481 kubelet[2774]: I1002 19:31:50.809387 2774 kubelet.go:381] "Attempting to sync node with API server" Oct 2 19:31:50.809481 kubelet[2774]: I1002 19:31:50.809412 2774 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:31:50.809676 kubelet[2774]: I1002 19:31:50.809496 2774 kubelet.go:281] "Adding apiserver pod source" Oct 2 19:31:50.809676 kubelet[2774]: I1002 19:31:50.809511 2774 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:31:50.812069 kubelet[2774]: I1002 19:31:50.812047 2774 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:31:50.814049 kubelet[2774]: I1002 19:31:50.814025 2774 server.go:1175] "Started kubelet" Oct 2 19:31:50.822000 audit[2785]: USER_ACCT pid=2785 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:50.823900 sudo[2785]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:31:50.823000 audit[2785]: CRED_REFR pid=2785 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:50.824545 sudo[2785]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:31:50.826000 audit[2785]: USER_START pid=2785 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:50.850000 audit[2774]: AVC avc: denied { mac_admin } for pid=2774 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.850000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:50.850000 audit[2774]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000eb19e0 a1=c000ed0eb8 a2=c000eb19b0 a3=25 items=0 ppid=1 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:50.850000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:50.850000 audit[2774]: AVC avc: denied { mac_admin } for pid=2774 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:50.850000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:50.850000 audit[2774]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000606240 a1=c000ed0ed0 a2=c000eb1a70 a3=25 items=0 ppid=1 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:50.850000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:50.859060 kubelet[2774]: I1002 19:31:50.851044 2774 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:31:50.859060 kubelet[2774]: I1002 19:31:50.851105 2774 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:31:50.859060 kubelet[2774]: I1002 19:31:50.851146 2774 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:31:50.859060 kubelet[2774]: I1002 19:31:50.856947 2774 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:31:50.859060 kubelet[2774]: I1002 19:31:50.858019 2774 server.go:438] "Adding debug handlers to kubelet server" Oct 2 19:31:50.868805 kubelet[2774]: I1002 19:31:50.868770 2774 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:31:50.877557 kubelet[2774]: I1002 19:31:50.875612 2774 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 19:31:50.880119 kubelet[2774]: E1002 19:31:50.880096 2774 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:31:50.880391 kubelet[2774]: E1002 19:31:50.880376 2774 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:31:50.886944 kubelet[2774]: E1002 19:31:50.886914 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:31:50.989734 kubelet[2774]: E1002 19:31:50.989692 2774 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-28-204\" not found" Oct 2 19:31:51.024581 kubelet[2774]: I1002 19:31:51.022688 2774 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-204" Oct 2 19:31:51.075995 kubelet[2774]: I1002 19:31:51.075960 2774 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-28-204" Oct 2 19:31:51.076171 kubelet[2774]: I1002 19:31:51.076050 2774 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-28-204" Oct 2 19:31:51.137857 kubelet[2774]: I1002 19:31:51.137677 2774 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:31:51.224607 kubelet[2774]: I1002 19:31:51.224578 2774 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 19:31:51.224607 kubelet[2774]: I1002 19:31:51.224601 2774 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 19:31:51.224810 kubelet[2774]: I1002 19:31:51.224621 2774 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:31:51.227154 kubelet[2774]: I1002 19:31:51.227106 2774 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:31:51.227617 kubelet[2774]: I1002 19:31:51.227597 2774 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:31:51.227803 kubelet[2774]: I1002 19:31:51.227792 2774 policy_none.go:49] "None policy: Start" Oct 2 19:31:51.229406 kubelet[2774]: I1002 19:31:51.229381 2774 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 19:31:51.229406 kubelet[2774]: I1002 19:31:51.229410 2774 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:31:51.230005 kubelet[2774]: I1002 19:31:51.229987 2774 state_mem.go:75] "Updated machine memory state" Oct 2 19:31:51.247542 kubelet[2774]: I1002 19:31:51.247400 2774 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:31:51.247542 kubelet[2774]: I1002 19:31:51.247549 2774 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 19:31:51.247761 kubelet[2774]: I1002 19:31:51.247572 2774 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 19:31:51.247761 kubelet[2774]: E1002 19:31:51.247637 2774 kubelet.go:2034] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:31:51.249739 kubelet[2774]: I1002 19:31:51.249700 2774 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:31:51.249000 audit[2774]: AVC avc: denied { mac_admin } for pid=2774 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:31:51.249000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:31:51.249000 audit[2774]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0014556e0 a1=c000df0db0 a2=c0014556b0 a3=25 items=0 ppid=1 pid=2774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:31:51.249000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:31:51.250133 kubelet[2774]: I1002 19:31:51.249824 2774 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:31:51.250133 kubelet[2774]: I1002 19:31:51.250050 2774 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:31:51.348443 kubelet[2774]: I1002 19:31:51.348402 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:31:51.348603 kubelet[2774]: I1002 19:31:51.348521 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:31:51.348603 kubelet[2774]: I1002 19:31:51.348580 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:31:51.357589 kubelet[2774]: E1002 19:31:51.357490 2774 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-28-204\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:51.357850 kubelet[2774]: E1002 19:31:51.357818 2774 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-28-204\" already exists" pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:51.414713 kubelet[2774]: I1002 19:31:51.414606 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/6fad20dd433c4de15babcc49c0fe812a-ca-certs\") pod \"kube-apiserver-ip-172-31-28-204\" (UID: \"6fad20dd433c4de15babcc49c0fe812a\") " pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:51.414713 kubelet[2774]: I1002 19:31:51.414663 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/6fad20dd433c4de15babcc49c0fe812a-k8s-certs\") pod \"kube-apiserver-ip-172-31-28-204\" (UID: \"6fad20dd433c4de15babcc49c0fe812a\") " pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:51.414918 kubelet[2774]: I1002 19:31:51.414732 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/6fad20dd433c4de15babcc49c0fe812a-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-28-204\" (UID: \"6fad20dd433c4de15babcc49c0fe812a\") " pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:51.414918 kubelet[2774]: I1002 19:31:51.414765 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-ca-certs\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:51.414918 kubelet[2774]: I1002 19:31:51.414795 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-kubeconfig\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:51.414918 kubelet[2774]: I1002 19:31:51.414828 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:51.414918 kubelet[2774]: I1002 19:31:51.414854 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/20e396a83ffd2a3898dc15042f3c5e8f-kubeconfig\") pod \"kube-scheduler-ip-172-31-28-204\" (UID: \"20e396a83ffd2a3898dc15042f3c5e8f\") " pod="kube-system/kube-scheduler-ip-172-31-28-204" Oct 2 19:31:51.415191 kubelet[2774]: I1002 19:31:51.414886 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:51.415191 kubelet[2774]: I1002 19:31:51.414926 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f1b35b9eb7a25ad3aa1d34ed88667ca-k8s-certs\") pod \"kube-controller-manager-ip-172-31-28-204\" (UID: \"3f1b35b9eb7a25ad3aa1d34ed88667ca\") " pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:51.678000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:51.678000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f46840 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:51.678000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:51.681000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:51.681000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f469a0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:51.681000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:51.684000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:51.684000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f46b00 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:51.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:51.687000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:31:51.687000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f46c60 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:51.687000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:51.834344 sudo[2785]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:51.833000 audit[2785]: USER_END pid=2785 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:51.833000 audit[2785]: CRED_DISP pid=2785 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:51.869903 kubelet[2774]: I1002 19:31:51.869867 2774 apiserver.go:52] "Watching apiserver" Oct 2 19:31:51.919100 kubelet[2774]: I1002 19:31:51.919059 2774 reconciler.go:169] "Reconciler: start to sync state" Oct 2 19:31:52.323303 kubelet[2774]: E1002 19:31:52.323260 2774 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-28-204\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-28-204" Oct 2 19:31:52.333019 kubelet[2774]: E1002 19:31:52.324886 2774 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-28-204\" already exists" pod="kube-system/kube-scheduler-ip-172-31-28-204" Oct 2 19:31:52.420275 kubelet[2774]: E1002 19:31:52.420244 2774 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-28-204\" already exists" pod="kube-system/kube-apiserver-ip-172-31-28-204" Oct 2 19:31:53.982102 sudo[1894]: pam_unix(sudo:session): session closed for user root Oct 2 19:31:53.988751 kernel: kauditd_printk_skb: 283 callbacks suppressed Oct 2 19:31:53.988928 kernel: audit: type=1106 audit(1696275113.981:1014): pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:53.981000 audit[1894]: USER_END pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:53.981000 audit[1894]: CRED_DISP pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:54.009404 kernel: audit: type=1104 audit(1696275113.981:1015): pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:31:54.012676 sshd[1891]: pam_unix(sshd:session): session closed for user core Oct 2 19:31:54.013000 audit[1891]: USER_END pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:54.017691 systemd[1]: sshd@6-172.31.28.204:22-139.178.89.65:38600.service: Deactivated successfully. Oct 2 19:31:54.018907 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:31:54.019106 systemd[1]: session-7.scope: Consumed 4.818s CPU time. Oct 2 19:31:54.014000 audit[1891]: CRED_DISP pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:54.023912 systemd-logind[1625]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:31:54.026141 systemd-logind[1625]: Removed session 7. Oct 2 19:31:54.030436 kernel: audit: type=1106 audit(1696275114.013:1016): pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:54.030557 kernel: audit: type=1104 audit(1696275114.014:1017): pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:31:54.030598 kernel: audit: type=1131 audit(1696275114.017:1018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.204:22-139.178.89.65:38600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:54.017000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.204:22-139.178.89.65:38600 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:31:54.594000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:31:54.605765 kernel: audit: type=1400 audit(1696275114.594:1019): avc: denied { watch } for pid=2616 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:31:54.605918 kernel: audit: type=1300 audit(1696275114.594:1019): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fb2900 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:54.594000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000fb2900 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:31:54.594000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:54.616798 kernel: audit: type=1327 audit(1696275114.594:1019): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:31:56.251289 kubelet[2774]: E1002 19:31:56.251239 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:01.259326 kubelet[2774]: E1002 19:32:01.259179 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:05.513395 kubelet[2774]: I1002 19:32:05.513355 2774 kuberuntime_manager.go:1050] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:32:05.514428 env[1634]: time="2023-10-02T19:32:05.514387941Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:32:05.515170 kubelet[2774]: I1002 19:32:05.515143 2774 kubelet_network.go:60] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:32:05.515827 kubelet[2774]: E1002 19:32:05.515812 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:05.833811 kubelet[2774]: I1002 19:32:05.833132 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:32:05.841983 systemd[1]: Created slice kubepods-besteffort-pod7c4ecc05_037c_4d99_9f60_959f2a262936.slice. Oct 2 19:32:05.925483 kubelet[2774]: I1002 19:32:05.925442 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7c4ecc05-037c-4d99-9f60-959f2a262936-xtables-lock\") pod \"kube-proxy-n92s5\" (UID: \"7c4ecc05-037c-4d99-9f60-959f2a262936\") " pod="kube-system/kube-proxy-n92s5" Oct 2 19:32:05.925768 kubelet[2774]: I1002 19:32:05.925754 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7c4ecc05-037c-4d99-9f60-959f2a262936-lib-modules\") pod \"kube-proxy-n92s5\" (UID: \"7c4ecc05-037c-4d99-9f60-959f2a262936\") " pod="kube-system/kube-proxy-n92s5" Oct 2 19:32:05.925920 kubelet[2774]: I1002 19:32:05.925908 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/7c4ecc05-037c-4d99-9f60-959f2a262936-kube-proxy\") pod \"kube-proxy-n92s5\" (UID: \"7c4ecc05-037c-4d99-9f60-959f2a262936\") " pod="kube-system/kube-proxy-n92s5" Oct 2 19:32:05.926050 kubelet[2774]: I1002 19:32:05.926039 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hrd9t\" (UniqueName: \"kubernetes.io/projected/7c4ecc05-037c-4d99-9f60-959f2a262936-kube-api-access-hrd9t\") pod \"kube-proxy-n92s5\" (UID: \"7c4ecc05-037c-4d99-9f60-959f2a262936\") " pod="kube-system/kube-proxy-n92s5" Oct 2 19:32:06.004097 kubelet[2774]: I1002 19:32:06.004061 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:32:06.011799 systemd[1]: Created slice kubepods-besteffort-pod2fd8fd3a_74c4_4d2e_bf80_a10edba3ee43.slice. Oct 2 19:32:06.017983 kubelet[2774]: W1002 19:32:06.017939 2774 reflector.go:424] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:32:06.018210 kubelet[2774]: E1002 19:32:06.018196 2774 reflector.go:140] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:32:06.023566 kubelet[2774]: I1002 19:32:06.023519 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:32:06.037003 systemd[1]: Created slice kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice. Oct 2 19:32:06.128149 kubelet[2774]: I1002 19:32:06.128028 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-cgroup\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128149 kubelet[2774]: I1002 19:32:06.128082 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cni-path\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128149 kubelet[2774]: I1002 19:32:06.128132 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/919865fc-c86e-4132-b753-09944182232d-clustermesh-secrets\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128410 kubelet[2774]: I1002 19:32:06.128160 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-bpf-maps\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128410 kubelet[2774]: I1002 19:32:06.128190 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-lib-modules\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128410 kubelet[2774]: I1002 19:32:06.128215 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-xtables-lock\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128410 kubelet[2774]: I1002 19:32:06.128243 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-kernel\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128410 kubelet[2774]: I1002 19:32:06.128283 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-run\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.128410 kubelet[2774]: I1002 19:32:06.128311 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/919865fc-c86e-4132-b753-09944182232d-cilium-config-path\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.129111 kubelet[2774]: I1002 19:32:06.128347 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f2wp9\" (UniqueName: \"kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-kube-api-access-f2wp9\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.129111 kubelet[2774]: I1002 19:32:06.128400 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-etc-cni-netd\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.129111 kubelet[2774]: I1002 19:32:06.128437 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-cilium-config-path\") pod \"cilium-operator-69b677f97c-m44wz\" (UID: \"2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43\") " pod="kube-system/cilium-operator-69b677f97c-m44wz" Oct 2 19:32:06.129111 kubelet[2774]: I1002 19:32:06.128469 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-hostproc\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.129111 kubelet[2774]: I1002 19:32:06.128508 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kv9n4\" (UniqueName: \"kubernetes.io/projected/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-kube-api-access-kv9n4\") pod \"cilium-operator-69b677f97c-m44wz\" (UID: \"2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43\") " pod="kube-system/cilium-operator-69b677f97c-m44wz" Oct 2 19:32:06.129348 kubelet[2774]: I1002 19:32:06.128779 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-hubble-tls\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.129348 kubelet[2774]: I1002 19:32:06.128850 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-net\") pod \"cilium-84v79\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " pod="kube-system/cilium-84v79" Oct 2 19:32:06.159042 env[1634]: time="2023-10-02T19:32:06.158999636Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-n92s5,Uid:7c4ecc05-037c-4d99-9f60-959f2a262936,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:06.242828 env[1634]: time="2023-10-02T19:32:06.242714935Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:06.251882 env[1634]: time="2023-10-02T19:32:06.251828033Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:06.252203 env[1634]: time="2023-10-02T19:32:06.252169225Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:06.253836 env[1634]: time="2023-10-02T19:32:06.252827880Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc3bbee98b8685a6455e46facb9f2687dc8400aa77298c15eed304646bc4c593 pid=2873 runtime=io.containerd.runc.v2 Oct 2 19:32:06.266653 kubelet[2774]: E1002 19:32:06.266625 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:06.287270 systemd[1]: Started cri-containerd-dc3bbee98b8685a6455e46facb9f2687dc8400aa77298c15eed304646bc4c593.scope. Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334607 kernel: audit: type=1400 audit(1696275126.320:1020): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334864 kernel: audit: type=1400 audit(1696275126.320:1021): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.347367 kernel: audit: type=1400 audit(1696275126.320:1022): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.347482 kernel: audit: type=1400 audit(1696275126.320:1023): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.351955 kernel: audit: type=1400 audit(1696275126.320:1024): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.357036 kernel: audit: type=1400 audit(1696275126.320:1025): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.364440 kernel: audit: type=1400 audit(1696275126.320:1026): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.371889 kernel: audit: type=1400 audit(1696275126.320:1027): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.387284 kernel: audit: type=1400 audit(1696275126.320:1028): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.387743 kernel: audit: type=1400 audit(1696275126.327:1029): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.327000 audit: BPF prog-id=115 op=LOAD Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2873 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463336262656539386238363835613634353565343666616362396632 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2873 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463336262656539386238363835613634353565343666616362396632 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.334000 audit: BPF prog-id=116 op=LOAD Oct 2 19:32:06.334000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c0550 items=0 ppid=2873 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463336262656539386238363835613634353565343666616362396632 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit: BPF prog-id=117 op=LOAD Oct 2 19:32:06.335000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c0598 items=0 ppid=2873 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463336262656539386238363835613634353565343666616362396632 Oct 2 19:32:06.335000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:32:06.335000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { perfmon } for pid=2885 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit[2885]: AVC avc: denied { bpf } for pid=2885 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.335000 audit: BPF prog-id=118 op=LOAD Oct 2 19:32:06.335000 audit[2885]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c09a8 items=0 ppid=2873 pid=2885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463336262656539386238363835613634353565343666616362396632 Oct 2 19:32:06.391440 env[1634]: time="2023-10-02T19:32:06.391338460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-n92s5,Uid:7c4ecc05-037c-4d99-9f60-959f2a262936,Namespace:kube-system,Attempt:0,} returns sandbox id \"dc3bbee98b8685a6455e46facb9f2687dc8400aa77298c15eed304646bc4c593\"" Oct 2 19:32:06.396306 env[1634]: time="2023-10-02T19:32:06.396264259Z" level=info msg="CreateContainer within sandbox \"dc3bbee98b8685a6455e46facb9f2687dc8400aa77298c15eed304646bc4c593\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:32:06.421650 env[1634]: time="2023-10-02T19:32:06.421606579Z" level=info msg="CreateContainer within sandbox \"dc3bbee98b8685a6455e46facb9f2687dc8400aa77298c15eed304646bc4c593\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"42755758ded6ffd69638c89d2fb8a94e43428969c674f136968ea5f75d1bdaf7\"" Oct 2 19:32:06.423030 env[1634]: time="2023-10-02T19:32:06.422995015Z" level=info msg="StartContainer for \"42755758ded6ffd69638c89d2fb8a94e43428969c674f136968ea5f75d1bdaf7\"" Oct 2 19:32:06.454383 systemd[1]: Started cri-containerd-42755758ded6ffd69638c89d2fb8a94e43428969c674f136968ea5f75d1bdaf7.scope. Oct 2 19:32:06.483000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.483000 audit[2917]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2873 pid=2917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432373535373538646564366666643639363338633839643266623861 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit: BPF prog-id=119 op=LOAD Oct 2 19:32:06.484000 audit[2917]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000357be0 items=0 ppid=2873 pid=2917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432373535373538646564366666643639363338633839643266623861 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit: BPF prog-id=120 op=LOAD Oct 2 19:32:06.484000 audit[2917]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000357c28 items=0 ppid=2873 pid=2917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432373535373538646564366666643639363338633839643266623861 Oct 2 19:32:06.484000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:32:06.484000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { perfmon } for pid=2917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit[2917]: AVC avc: denied { bpf } for pid=2917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:06.484000 audit: BPF prog-id=121 op=LOAD Oct 2 19:32:06.484000 audit[2917]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000357cb8 items=0 ppid=2873 pid=2917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:06.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432373535373538646564366666643639363338633839643266623861 Oct 2 19:32:06.568083 env[1634]: time="2023-10-02T19:32:06.568034603Z" level=info msg="StartContainer for \"42755758ded6ffd69638c89d2fb8a94e43428969c674f136968ea5f75d1bdaf7\" returns successfully" Oct 2 19:32:07.060021 kernel: IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) Oct 2 19:32:07.060641 kernel: IPVS: Connection hash table configured (size=4096, memory=32Kbytes) Oct 2 19:32:07.062876 kernel: IPVS: ipvs loaded. Oct 2 19:32:07.084683 kernel: IPVS: [rr] scheduler registered. Oct 2 19:32:07.120753 kernel: IPVS: [wrr] scheduler registered. Oct 2 19:32:07.129751 kernel: IPVS: [sh] scheduler registered. Oct 2 19:32:07.231540 kubelet[2774]: E1002 19:32:07.231503 2774 configmap.go:197] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:32:07.232095 kubelet[2774]: E1002 19:32:07.231625 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-cilium-config-path podName:2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43 nodeName:}" failed. No retries permitted until 2023-10-02 19:32:07.731591959 +0000 UTC m=+17.051359405 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-cilium-config-path") pod "cilium-operator-69b677f97c-m44wz" (UID: "2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:32:07.232095 kubelet[2774]: E1002 19:32:07.231917 2774 configmap.go:197] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:32:07.232095 kubelet[2774]: E1002 19:32:07.232039 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/919865fc-c86e-4132-b753-09944182232d-cilium-config-path podName:919865fc-c86e-4132-b753-09944182232d nodeName:}" failed. No retries permitted until 2023-10-02 19:32:07.731947939 +0000 UTC m=+17.051715362 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/919865fc-c86e-4132-b753-09944182232d-cilium-config-path") pod "cilium-84v79" (UID: "919865fc-c86e-4132-b753-09944182232d") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:32:07.312000 audit[2978]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.312000 audit[2978]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc13f4bc30 a2=0 a3=7ffc13f4bc1c items=0 ppid=2928 pid=2978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:32:07.315000 audit[2979]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=2979 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.315000 audit[2979]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcffdb5680 a2=0 a3=7ffcffdb566c items=0 ppid=2928 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:32:07.318000 audit[2980]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=2980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.318000 audit[2980]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeba013520 a2=0 a3=7ffeba01350c items=0 ppid=2928 pid=2980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:32:07.320000 audit[2981]: NETFILTER_CFG table=mangle:62 family=10 entries=1 op=nft_register_chain pid=2981 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.320000 audit[2981]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf1b283d0 a2=0 a3=7ffcf1b283bc items=0 ppid=2928 pid=2981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.320000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:32:07.323000 audit[2982]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=2982 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.323000 audit[2982]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee95b0c10 a2=0 a3=7ffee95b0bfc items=0 ppid=2928 pid=2982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.323000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:32:07.332000 audit[2983]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=2983 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.332000 audit[2983]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff91674ea0 a2=0 a3=7fff91674e8c items=0 ppid=2928 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.332000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:32:07.422000 audit[2984]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=2984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.422000 audit[2984]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc2bcd50c0 a2=0 a3=7ffc2bcd50ac items=0 ppid=2928 pid=2984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.422000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:32:07.431000 audit[2986]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=2986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.431000 audit[2986]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc5e769350 a2=0 a3=7ffc5e76933c items=0 ppid=2928 pid=2986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:32:07.443000 audit[2989]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=2989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.443000 audit[2989]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdfee3cf20 a2=0 a3=7ffdfee3cf0c items=0 ppid=2928 pid=2989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:32:07.445000 audit[2990]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=2990 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.445000 audit[2990]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc27c86740 a2=0 a3=7ffc27c8672c items=0 ppid=2928 pid=2990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.445000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:32:07.449000 audit[2992]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.449000 audit[2992]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff4ce10910 a2=0 a3=7fff4ce108fc items=0 ppid=2928 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:32:07.450000 audit[2993]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=2993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.450000 audit[2993]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff3ced7840 a2=0 a3=7fff3ced782c items=0 ppid=2928 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:32:07.455000 audit[2995]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.455000 audit[2995]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc7b38ff10 a2=0 a3=7ffc7b38fefc items=0 ppid=2928 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.455000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:32:07.460000 audit[2998]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=2998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.460000 audit[2998]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc7ded7c70 a2=0 a3=7ffc7ded7c5c items=0 ppid=2928 pid=2998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:32:07.463000 audit[2999]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=2999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.463000 audit[2999]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc741c95e0 a2=0 a3=7ffc741c95cc items=0 ppid=2928 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:32:07.467000 audit[3001]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.467000 audit[3001]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff04a65ba0 a2=0 a3=7fff04a65b8c items=0 ppid=2928 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.467000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:32:07.469000 audit[3002]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3002 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.469000 audit[3002]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1ad9fdc0 a2=0 a3=7ffd1ad9fdac items=0 ppid=2928 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.469000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:32:07.473000 audit[3004]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.473000 audit[3004]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffff57c0ca0 a2=0 a3=7ffff57c0c8c items=0 ppid=2928 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.473000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:32:07.477000 audit[3007]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3007 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.477000 audit[3007]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffec432c4b0 a2=0 a3=7ffec432c49c items=0 ppid=2928 pid=3007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.477000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:32:07.483000 audit[3010]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3010 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.483000 audit[3010]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe4095bed0 a2=0 a3=7ffe4095bebc items=0 ppid=2928 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.483000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:32:07.485000 audit[3011]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3011 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.485000 audit[3011]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff1365acd0 a2=0 a3=7fff1365acbc items=0 ppid=2928 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.485000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:32:07.490000 audit[3013]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3013 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.490000 audit[3013]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffde2b4250 a2=0 a3=7fffde2b423c items=0 ppid=2928 pid=3013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.490000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:32:07.495000 audit[3016]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3016 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:32:07.495000 audit[3016]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffe1ce8440 a2=0 a3=7fffe1ce842c items=0 ppid=2928 pid=3016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.495000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:32:07.517000 audit[3020]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:32:07.517000 audit[3020]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffcd53cacf0 a2=0 a3=7ffcd53cacdc items=0 ppid=2928 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:32:07.527000 audit[3020]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:32:07.527000 audit[3020]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffcd53cacf0 a2=0 a3=7ffcd53cacdc items=0 ppid=2928 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.527000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:32:07.531000 audit[3023]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3023 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.531000 audit[3023]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffadb449f0 a2=0 a3=7fffadb449dc items=0 ppid=2928 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.531000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:32:07.535000 audit[3025]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3025 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.535000 audit[3025]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdc8961e00 a2=0 a3=7ffdc8961dec items=0 ppid=2928 pid=3025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.535000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:32:07.539000 audit[3028]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3028 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.539000 audit[3028]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd74dc1e90 a2=0 a3=7ffd74dc1e7c items=0 ppid=2928 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.539000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:32:07.541000 audit[3029]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3029 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.541000 audit[3029]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde8d42e90 a2=0 a3=7ffde8d42e7c items=0 ppid=2928 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.541000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:32:07.545000 audit[3031]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3031 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.545000 audit[3031]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcce006cc0 a2=0 a3=7ffcce006cac items=0 ppid=2928 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.545000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:32:07.546000 audit[3032]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3032 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.546000 audit[3032]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffefdd5dc50 a2=0 a3=7ffefdd5dc3c items=0 ppid=2928 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.546000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:32:07.549000 audit[3034]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3034 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.549000 audit[3034]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffee9fe1dd0 a2=0 a3=7ffee9fe1dbc items=0 ppid=2928 pid=3034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.549000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:32:07.555000 audit[3037]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3037 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.555000 audit[3037]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fffac49d0d0 a2=0 a3=7fffac49d0bc items=0 ppid=2928 pid=3037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:32:07.557000 audit[3038]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.557000 audit[3038]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff48c09f00 a2=0 a3=7fff48c09eec items=0 ppid=2928 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:32:07.561000 audit[3040]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3040 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.561000 audit[3040]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffef60eba50 a2=0 a3=7ffef60eba3c items=0 ppid=2928 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.561000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:32:07.563000 audit[3041]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3041 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.563000 audit[3041]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff65a97e0 a2=0 a3=7ffff65a97cc items=0 ppid=2928 pid=3041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.563000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:32:07.567000 audit[3043]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3043 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.567000 audit[3043]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffec3d17a30 a2=0 a3=7ffec3d17a1c items=0 ppid=2928 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.567000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:32:07.574000 audit[3046]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3046 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.574000 audit[3046]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffee41842b0 a2=0 a3=7ffee418429c items=0 ppid=2928 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.574000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:32:07.579000 audit[3049]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3049 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.579000 audit[3049]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdbdea28d0 a2=0 a3=7ffdbdea28bc items=0 ppid=2928 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.579000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:32:07.581000 audit[3050]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3050 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.581000 audit[3050]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc3d869e30 a2=0 a3=7ffc3d869e1c items=0 ppid=2928 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.581000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:32:07.584000 audit[3052]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.584000 audit[3052]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffeba30b5c0 a2=0 a3=7ffeba30b5ac items=0 ppid=2928 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:32:07.589000 audit[3055]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:32:07.589000 audit[3055]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffebaf9e130 a2=0 a3=7ffebaf9e11c items=0 ppid=2928 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.589000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:32:07.597000 audit[3059]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3059 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:32:07.597000 audit[3059]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffec9710c60 a2=0 a3=7ffec9710c4c items=0 ppid=2928 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.597000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:32:07.597000 audit[3059]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:32:07.597000 audit[3059]: SYSCALL arch=c000003e syscall=46 success=yes exit=1860 a0=3 a1=7ffec9710c60 a2=0 a3=7ffec9710c4c items=0 ppid=2928 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:07.597000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:32:07.822895 env[1634]: time="2023-10-02T19:32:07.821416201Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-m44wz,Uid:2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:07.841040 env[1634]: time="2023-10-02T19:32:07.840902616Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-84v79,Uid:919865fc-c86e-4132-b753-09944182232d,Namespace:kube-system,Attempt:0,}" Oct 2 19:32:07.862792 env[1634]: time="2023-10-02T19:32:07.862678991Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:07.862792 env[1634]: time="2023-10-02T19:32:07.862781808Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:07.863099 env[1634]: time="2023-10-02T19:32:07.862813868Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:07.863462 env[1634]: time="2023-10-02T19:32:07.863387605Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d pid=3066 runtime=io.containerd.runc.v2 Oct 2 19:32:07.924436 systemd[1]: Started cri-containerd-8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d.scope. Oct 2 19:32:07.936988 env[1634]: time="2023-10-02T19:32:07.930986837Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:32:07.936988 env[1634]: time="2023-10-02T19:32:07.931183609Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:32:07.936988 env[1634]: time="2023-10-02T19:32:07.931237333Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:32:07.936988 env[1634]: time="2023-10-02T19:32:07.931430024Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d pid=3098 runtime=io.containerd.runc.v2 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.010000 audit: BPF prog-id=122 op=LOAD Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3066 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636236343937303665393566333538363233363535303238666232 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3066 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636236343937303665393566333538363233363535303238666232 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit: BPF prog-id=123 op=LOAD Oct 2 19:32:08.011000 audit[3080]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003bc640 items=0 ppid=3066 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636236343937303665393566333538363233363535303238666232 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit: BPF prog-id=124 op=LOAD Oct 2 19:32:08.011000 audit[3080]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003bc688 items=0 ppid=3066 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636236343937303665393566333538363233363535303238666232 Oct 2 19:32:08.011000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:32:08.011000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { perfmon } for pid=3080 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit[3080]: AVC avc: denied { bpf } for pid=3080 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.011000 audit: BPF prog-id=125 op=LOAD Oct 2 19:32:08.011000 audit[3080]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003bca98 items=0 ppid=3066 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636236343937303665393566333538363233363535303238666232 Oct 2 19:32:08.056867 systemd[1]: Started cri-containerd-dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d.scope. Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.084000 audit: BPF prog-id=126 op=LOAD Oct 2 19:32:08.091000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.091000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303236316266356164353863366262336536373637643536336432 Oct 2 19:32:08.091000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.091000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303236316266356164353863366262336536373637643536336432 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.092000 audit: BPF prog-id=127 op=LOAD Oct 2 19:32:08.092000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003aeba0 items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303236316266356164353863366262336536373637643536336432 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit: BPF prog-id=128 op=LOAD Oct 2 19:32:08.099000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003aebe8 items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303236316266356164353863366262336536373637643536336432 Oct 2 19:32:08.099000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:32:08.099000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { perfmon } for pid=3107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit[3107]: AVC avc: denied { bpf } for pid=3107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:08.099000 audit: BPF prog-id=129 op=LOAD Oct 2 19:32:08.099000 audit[3107]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003aeff8 items=0 ppid=3098 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:08.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463303236316266356164353863366262336536373637643536336432 Oct 2 19:32:08.142417 env[1634]: time="2023-10-02T19:32:08.142370662Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-m44wz,Uid:2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43,Namespace:kube-system,Attempt:0,} returns sandbox id \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\"" Oct 2 19:32:08.148939 env[1634]: time="2023-10-02T19:32:08.148892897Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\"" Oct 2 19:32:08.153089 env[1634]: time="2023-10-02T19:32:08.152694183Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-84v79,Uid:919865fc-c86e-4132-b753-09944182232d,Namespace:kube-system,Attempt:0,} returns sandbox id \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\"" Oct 2 19:32:11.270072 kubelet[2774]: E1002 19:32:11.270000 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:16.274195 kubelet[2774]: E1002 19:32:16.274120 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:18.851094 env[1634]: time="2023-10-02T19:32:18.851007507Z" level=error msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\" failed" error="failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\": failed to copy: httpReadSeeker: failed open: unexpected status code https://quay.io/v2/cilium/operator-generic/manifests/sha256:6f57f36e6291e37e1e7084fa65bafdeac0beb5d52039cd1e707ebc246844bd5c: 504 Gateway Time-out" Oct 2 19:32:18.851608 kubelet[2774]: E1002 19:32:18.851396 2774 remote_image.go:242] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\": failed to copy: httpReadSeeker: failed open: unexpected status code https://quay.io/v2/cilium/operator-generic/manifests/sha256:6f57f36e6291e37e1e7084fa65bafdeac0beb5d52039cd1e707ebc246844bd5c: 504 Gateway Time-out" image="quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1" Oct 2 19:32:18.851608 kubelet[2774]: E1002 19:32:18.851472 2774 kuberuntime_image.go:51] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\": failed to copy: httpReadSeeker: failed open: unexpected status code https://quay.io/v2/cilium/operator-generic/manifests/sha256:6f57f36e6291e37e1e7084fa65bafdeac0beb5d52039cd1e707ebc246844bd5c: 504 Gateway Time-out" image="quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1" Oct 2 19:32:18.852122 kubelet[2774]: E1002 19:32:18.851833 2774 kuberuntime_manager.go:862] container &Container{Name:cilium-operator,Image:quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Command:[cilium-operator-generic],Args:[--config-dir=/tmp/cilium/config-map --debug=$(CILIUM_DEBUG)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:K8S_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_K8S_NAMESPACE,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_DEBUG,Value:,ValueFrom:&EnvVarSource{FieldRef:nil,ResourceFieldRef:nil,ConfigMapKeyRef:&ConfigMapKeySelector{LocalObjectReference:LocalObjectReference{Name:cilium-config,},Key:debug,Optional:*true,},SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:cilium-config-path,ReadOnly:true,MountPath:/tmp/cilium/config-map,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-kv9n4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/healthz,Port:{0 9234 },Host:127.0.0.1,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:60,TimeoutSeconds:3,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-operator-69b677f97c-m44wz_kube-system(2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1": failed to copy: httpReadSeeker: failed open: unexpected status code https://quay.io/v2/cilium/operator-generic/manifests/sha256:6f57f36e6291e37e1e7084fa65bafdeac0beb5d52039cd1e707ebc246844bd5c: 504 Gateway Time-out Oct 2 19:32:18.852122 kubelet[2774]: E1002 19:32:18.851913 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\\\": failed to copy: httpReadSeeker: failed open: unexpected status code https://quay.io/v2/cilium/operator-generic/manifests/sha256:6f57f36e6291e37e1e7084fa65bafdeac0beb5d52039cd1e707ebc246844bd5c: 504 Gateway Time-out\"" pod="kube-system/cilium-operator-69b677f97c-m44wz" podUID=2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43 Oct 2 19:32:18.853076 env[1634]: time="2023-10-02T19:32:18.852691783Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\"" Oct 2 19:32:19.369957 kubelet[2774]: E1002 19:32:19.369921 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\\\"\"" pod="kube-system/cilium-operator-69b677f97c-m44wz" podUID=2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43 Oct 2 19:32:21.278225 kubelet[2774]: E1002 19:32:21.278188 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:26.279674 kubelet[2774]: E1002 19:32:26.279639 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:28.524705 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2098344779.mount: Deactivated successfully. Oct 2 19:32:31.281638 kubelet[2774]: E1002 19:32:31.281301 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:34.737530 env[1634]: time="2023-10-02T19:32:34.737470776Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:34.826308 env[1634]: time="2023-10-02T19:32:34.826263680Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:526bd4754c9cd45a9602873f814648239ebf8405ea2b401f5e7a3546f7310d88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:34.849163 env[1634]: time="2023-10-02T19:32:34.849109744Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:34.849449 env[1634]: time="2023-10-02T19:32:34.849414276Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\" returns image reference \"sha256:526bd4754c9cd45a9602873f814648239ebf8405ea2b401f5e7a3546f7310d88\"" Oct 2 19:32:34.851118 env[1634]: time="2023-10-02T19:32:34.851084465Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\"" Oct 2 19:32:34.852092 env[1634]: time="2023-10-02T19:32:34.852056890Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:32:35.315278 env[1634]: time="2023-10-02T19:32:35.315215143Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\"" Oct 2 19:32:35.316061 env[1634]: time="2023-10-02T19:32:35.316025042Z" level=info msg="StartContainer for \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\"" Oct 2 19:32:35.376022 systemd[1]: Started cri-containerd-5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000.scope. Oct 2 19:32:35.419595 systemd[1]: cri-containerd-5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000.scope: Deactivated successfully. Oct 2 19:32:35.448695 env[1634]: time="2023-10-02T19:32:35.448631745Z" level=info msg="shim disconnected" id=5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000 Oct 2 19:32:35.448695 env[1634]: time="2023-10-02T19:32:35.448687207Z" level=warning msg="cleaning up after shim disconnected" id=5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000 namespace=k8s.io Oct 2 19:32:35.448695 env[1634]: time="2023-10-02T19:32:35.448700290Z" level=info msg="cleaning up dead shim" Oct 2 19:32:35.459753 env[1634]: time="2023-10-02T19:32:35.459694601Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:32:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3168 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:32:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:32:35.464855 env[1634]: time="2023-10-02T19:32:35.463973127Z" level=error msg="copy shim log" error="read /proc/self/fd/91: file already closed" Oct 2 19:32:35.465753 env[1634]: time="2023-10-02T19:32:35.465617142Z" level=error msg="Failed to pipe stdout of container \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\"" error="reading from a closed fifo" Oct 2 19:32:35.470987 env[1634]: time="2023-10-02T19:32:35.470926864Z" level=error msg="Failed to pipe stderr of container \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\"" error="reading from a closed fifo" Oct 2 19:32:35.478557 env[1634]: time="2023-10-02T19:32:35.478502996Z" level=error msg="StartContainer for \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:32:35.480573 kubelet[2774]: E1002 19:32:35.479168 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000" Oct 2 19:32:35.480573 kubelet[2774]: E1002 19:32:35.479316 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:32:35.480573 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:32:35.480573 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:32:35.480573 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f2wp9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:32:35.480573 kubelet[2774]: E1002 19:32:35.479360 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:32:36.095928 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000-rootfs.mount: Deactivated successfully. Oct 2 19:32:36.269747 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3680911597.mount: Deactivated successfully. Oct 2 19:32:36.291561 kubelet[2774]: E1002 19:32:36.291522 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:36.522783 env[1634]: time="2023-10-02T19:32:36.522696740Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:32:36.549995 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3579630050.mount: Deactivated successfully. Oct 2 19:32:36.559767 env[1634]: time="2023-10-02T19:32:36.559694493Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\"" Oct 2 19:32:36.560991 env[1634]: time="2023-10-02T19:32:36.560961533Z" level=info msg="StartContainer for \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\"" Oct 2 19:32:36.608836 systemd[1]: Started cri-containerd-69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5.scope. Oct 2 19:32:36.637883 systemd[1]: cri-containerd-69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5.scope: Deactivated successfully. Oct 2 19:32:36.728987 env[1634]: time="2023-10-02T19:32:36.728926818Z" level=info msg="shim disconnected" id=69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5 Oct 2 19:32:36.729492 env[1634]: time="2023-10-02T19:32:36.729465349Z" level=warning msg="cleaning up after shim disconnected" id=69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5 namespace=k8s.io Oct 2 19:32:36.729616 env[1634]: time="2023-10-02T19:32:36.729598975Z" level=info msg="cleaning up dead shim" Oct 2 19:32:36.763871 env[1634]: time="2023-10-02T19:32:36.763814055Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:32:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3204 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:32:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:32:36.764553 env[1634]: time="2023-10-02T19:32:36.764483271Z" level=error msg="copy shim log" error="read /proc/self/fd/95: file already closed" Oct 2 19:32:36.765276 env[1634]: time="2023-10-02T19:32:36.765224662Z" level=error msg="Failed to pipe stdout of container \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\"" error="reading from a closed fifo" Oct 2 19:32:36.765684 env[1634]: time="2023-10-02T19:32:36.765408300Z" level=error msg="Failed to pipe stderr of container \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\"" error="reading from a closed fifo" Oct 2 19:32:36.768070 env[1634]: time="2023-10-02T19:32:36.768023576Z" level=error msg="StartContainer for \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:32:36.768486 kubelet[2774]: E1002 19:32:36.768462 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5" Oct 2 19:32:36.769307 kubelet[2774]: E1002 19:32:36.768828 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:32:36.769307 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:32:36.769307 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:32:36.769307 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f2wp9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:32:36.769307 kubelet[2774]: E1002 19:32:36.768899 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:32:37.427142 env[1634]: time="2023-10-02T19:32:37.427084743Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:37.430402 env[1634]: time="2023-10-02T19:32:37.430359948Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7eda471b44d1665b27a56412a479c6baff49461eb4cd7e9886be66da63fd36e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:37.433016 env[1634]: time="2023-10-02T19:32:37.432974291Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:32:37.433806 env[1634]: time="2023-10-02T19:32:37.433758520Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\" returns image reference \"sha256:b7eda471b44d1665b27a56412a479c6baff49461eb4cd7e9886be66da63fd36e\"" Oct 2 19:32:37.439222 env[1634]: time="2023-10-02T19:32:37.439170044Z" level=info msg="CreateContainer within sandbox \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:32:37.461105 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount230669408.mount: Deactivated successfully. Oct 2 19:32:37.493528 kubelet[2774]: I1002 19:32:37.493499 2774 scope.go:115] "RemoveContainer" containerID="5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000" Oct 2 19:32:37.502148 kubelet[2774]: I1002 19:32:37.493901 2774 scope.go:115] "RemoveContainer" containerID="5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000" Oct 2 19:32:37.502360 env[1634]: time="2023-10-02T19:32:37.494593164Z" level=info msg="CreateContainer within sandbox \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\"" Oct 2 19:32:37.532889 env[1634]: time="2023-10-02T19:32:37.525356157Z" level=info msg="StartContainer for \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\"" Oct 2 19:32:37.532889 env[1634]: time="2023-10-02T19:32:37.531482908Z" level=info msg="RemoveContainer for \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\"" Oct 2 19:32:37.540071 env[1634]: time="2023-10-02T19:32:37.540016689Z" level=info msg="RemoveContainer for \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\" returns successfully" Oct 2 19:32:37.546191 kubelet[2774]: E1002 19:32:37.546153 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:32:37.551041 env[1634]: time="2023-10-02T19:32:37.550994595Z" level=info msg="RemoveContainer for \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\"" Oct 2 19:32:37.551041 env[1634]: time="2023-10-02T19:32:37.551041223Z" level=info msg="RemoveContainer for \"5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000\" returns successfully" Oct 2 19:32:37.601300 systemd[1]: Started cri-containerd-512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24.scope. Oct 2 19:32:37.631892 kernel: kauditd_printk_skb: 336 callbacks suppressed Oct 2 19:32:37.632026 kernel: audit: type=1400 audit(1696275157.624:1124): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.636709 kernel: audit: type=1400 audit(1696275157.624:1125): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.652675 kernel: audit: type=1400 audit(1696275157.624:1126): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.652923 kernel: audit: type=1400 audit(1696275157.624:1127): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.665904 kernel: audit: type=1400 audit(1696275157.624:1128): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.666034 kernel: audit: type=1400 audit(1696275157.624:1129): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.672121 kernel: audit: type=1400 audit(1696275157.624:1130): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.678106 kernel: audit: type=1400 audit(1696275157.624:1131): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.684549 kernel: audit: type=1400 audit(1696275157.624:1132): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.691805 kernel: audit: type=1400 audit(1696275157.624:1133): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.624000 audit: BPF prog-id=130 op=LOAD Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3066 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:37.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531326162336234363337303663323331643761623365366337376563 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3066 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:37.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531326162336234363337303663323331643761623365366337376563 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.625000 audit: BPF prog-id=131 op=LOAD Oct 2 19:32:37.625000 audit[3229]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001db0b0 items=0 ppid=3066 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:37.625000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531326162336234363337303663323331643761623365366337376563 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit: BPF prog-id=132 op=LOAD Oct 2 19:32:37.631000 audit[3229]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001db0f8 items=0 ppid=3066 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:37.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531326162336234363337303663323331643761623365366337376563 Oct 2 19:32:37.631000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:32:37.631000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { perfmon } for pid=3229 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit[3229]: AVC avc: denied { bpf } for pid=3229 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:32:37.631000 audit: BPF prog-id=133 op=LOAD Oct 2 19:32:37.631000 audit[3229]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001db508 items=0 ppid=3066 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:37.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531326162336234363337303663323331643761623365366337376563 Oct 2 19:32:37.698879 env[1634]: time="2023-10-02T19:32:37.697060759Z" level=info msg="StartContainer for \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\" returns successfully" Oct 2 19:32:37.724000 audit[3239]: AVC avc: denied { map_create } for pid=3239 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c970,c1020 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c970,c1020 tclass=bpf permissive=0 Oct 2 19:32:37.724000 audit[3239]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0005d97d0 a2=48 a3=c0005d97c0 items=0 ppid=3066 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c970,c1020 key=(null) Oct 2 19:32:37.724000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:32:38.497944 kubelet[2774]: E1002 19:32:38.497905 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:32:38.569374 kubelet[2774]: W1002 19:32:38.569306 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice/cri-containerd-5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000.scope WatchSource:0}: container "5cb69941eb754d43f08e883c6bb7be0cc2fdc200d69c5d94ff7579bf1c7ff000" in namespace "k8s.io": not found Oct 2 19:32:41.293526 kubelet[2774]: E1002 19:32:41.293496 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:41.678388 kubelet[2774]: W1002 19:32:41.678268 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice/cri-containerd-69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5.scope WatchSource:0}: task 69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5 not found: not found Oct 2 19:32:43.661000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:43.664007 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:32:43.664067 kernel: audit: type=1400 audit(1696275163.661:1143): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:43.661000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000ca8060 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:43.687125 kernel: audit: type=1300 audit(1696275163.661:1143): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000ca8060 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:43.687271 kernel: audit: type=1327 audit(1696275163.661:1143): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:43.661000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:43.662000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:43.662000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c5d500 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:43.713144 kernel: audit: type=1400 audit(1696275163.662:1144): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:43.713383 kernel: audit: type=1300 audit(1696275163.662:1144): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c5d500 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:43.713428 kernel: audit: type=1327 audit(1696275163.662:1144): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:43.662000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:46.295197 kubelet[2774]: E1002 19:32:46.295158 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:46.835000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.835000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a4a3a20 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:32:46.849880 kernel: audit: type=1400 audit(1696275166.835:1145): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.850018 kernel: audit: type=1300 audit(1696275166.835:1145): arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a4a3a20 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:32:46.850117 kernel: audit: type=1327 audit(1696275166.835:1145): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:32:46.835000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:32:46.835000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.861706 kernel: audit: type=1400 audit(1696275166.835:1146): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.835000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00c86de00 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:32:46.835000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:32:46.837000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.837000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00c86de90 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:32:46.837000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:32:46.842000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.842000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00c8c6030 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:32:46.842000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:32:46.964000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.964000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a42b540 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:32:46.964000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:32:46.964000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:46.964000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00c8c6090 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:32:46.964000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:32:51.296766 kubelet[2774]: E1002 19:32:51.296739 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:51.686195 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:32:51.686327 kernel: audit: type=1400 audit(1696275171.678:1151): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.678000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.678000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000f8e040 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:51.678000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:51.704140 kernel: audit: type=1300 audit(1696275171.678:1151): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000f8e040 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:51.704279 kernel: audit: type=1327 audit(1696275171.678:1151): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:51.704317 kernel: audit: type=1400 audit(1696275171.685:1152): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.685000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.685000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c000f8e080 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:51.718603 kernel: audit: type=1300 audit(1696275171.685:1152): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c000f8e080 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:51.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:51.685000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.735713 kernel: audit: type=1327 audit(1696275171.685:1152): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:51.735865 kernel: audit: type=1400 audit(1696275171.685:1153): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.735902 kernel: audit: type=1300 audit(1696275171.685:1153): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000f02340 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:51.685000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000f02340 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:51.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:51.751785 kernel: audit: type=1327 audit(1696275171.685:1153): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:51.751932 kernel: audit: type=1400 audit(1696275171.686:1154): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.686000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:32:51.686000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000f8e0c0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:32:51.686000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:32:52.408417 systemd[1]: Started sshd@7-172.31.28.204:22-139.178.89.65:36628.service. Oct 2 19:32:52.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.204:22-139.178.89.65:36628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:52.624000 audit[3263]: USER_ACCT pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:32:52.625942 sshd[3263]: Accepted publickey for core from 139.178.89.65 port 36628 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:32:52.628000 audit[3263]: CRED_ACQ pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:32:52.628000 audit[3263]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbddf91a0 a2=3 a3=0 items=0 ppid=1 pid=3263 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:32:52.628000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:32:52.630957 sshd[3263]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:32:52.646378 systemd-logind[1625]: New session 8 of user core. Oct 2 19:32:52.647593 systemd[1]: Started session-8.scope. Oct 2 19:32:52.663000 audit[3263]: USER_START pid=3263 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:32:52.665000 audit[3265]: CRED_ACQ pid=3265 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:32:53.051845 sshd[3263]: pam_unix(sshd:session): session closed for user core Oct 2 19:32:53.053000 audit[3263]: USER_END pid=3263 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:32:53.053000 audit[3263]: CRED_DISP pid=3263 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:32:53.056213 systemd[1]: sshd@7-172.31.28.204:22-139.178.89.65:36628.service: Deactivated successfully. Oct 2 19:32:53.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.204:22-139.178.89.65:36628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:32:53.057512 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:32:53.058665 systemd-logind[1625]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:32:53.059625 systemd-logind[1625]: Removed session 8. Oct 2 19:32:53.258750 env[1634]: time="2023-10-02T19:32:53.255995547Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:32:53.311700 env[1634]: time="2023-10-02T19:32:53.311565877Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\"" Oct 2 19:32:53.312778 env[1634]: time="2023-10-02T19:32:53.312743409Z" level=info msg="StartContainer for \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\"" Oct 2 19:32:53.369051 systemd[1]: run-containerd-runc-k8s.io-eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493-runc.mZMLD7.mount: Deactivated successfully. Oct 2 19:32:53.372147 systemd[1]: Started cri-containerd-eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493.scope. Oct 2 19:32:53.386071 systemd[1]: cri-containerd-eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493.scope: Deactivated successfully. Oct 2 19:32:53.424270 env[1634]: time="2023-10-02T19:32:53.424211567Z" level=info msg="shim disconnected" id=eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493 Oct 2 19:32:53.424270 env[1634]: time="2023-10-02T19:32:53.424267438Z" level=warning msg="cleaning up after shim disconnected" id=eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493 namespace=k8s.io Oct 2 19:32:53.424270 env[1634]: time="2023-10-02T19:32:53.424278674Z" level=info msg="cleaning up dead shim" Oct 2 19:32:53.434482 env[1634]: time="2023-10-02T19:32:53.434329203Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:32:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3300 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:32:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:32:53.441404 env[1634]: time="2023-10-02T19:32:53.435304086Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 19:32:53.441404 env[1634]: time="2023-10-02T19:32:53.435840360Z" level=error msg="Failed to pipe stdout of container \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\"" error="reading from a closed fifo" Oct 2 19:32:53.441772 env[1634]: time="2023-10-02T19:32:53.441674893Z" level=error msg="Failed to pipe stderr of container \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\"" error="reading from a closed fifo" Oct 2 19:32:53.445297 env[1634]: time="2023-10-02T19:32:53.445039417Z" level=error msg="StartContainer for \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:32:53.446758 kubelet[2774]: E1002 19:32:53.445522 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493" Oct 2 19:32:53.446758 kubelet[2774]: E1002 19:32:53.446530 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:32:53.446758 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:32:53.446758 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:32:53.446758 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f2wp9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:32:53.446758 kubelet[2774]: E1002 19:32:53.446597 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:32:53.559168 kubelet[2774]: I1002 19:32:53.559045 2774 scope.go:115] "RemoveContainer" containerID="69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5" Oct 2 19:32:53.560690 kubelet[2774]: I1002 19:32:53.559597 2774 scope.go:115] "RemoveContainer" containerID="69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5" Oct 2 19:32:53.565552 env[1634]: time="2023-10-02T19:32:53.565450196Z" level=info msg="RemoveContainer for \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\"" Oct 2 19:32:53.567655 env[1634]: time="2023-10-02T19:32:53.567616704Z" level=info msg="RemoveContainer for \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\"" Oct 2 19:32:53.567995 env[1634]: time="2023-10-02T19:32:53.567954865Z" level=error msg="RemoveContainer for \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\" failed" error="failed to set removing state for container \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\": container is already in removing state" Oct 2 19:32:53.570054 kubelet[2774]: E1002 19:32:53.568439 2774 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\": container is already in removing state" containerID="69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5" Oct 2 19:32:53.570054 kubelet[2774]: E1002 19:32:53.568485 2774 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5": container is already in removing state; Skipping pod "cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)" Oct 2 19:32:53.570054 kubelet[2774]: E1002 19:32:53.569259 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:32:53.577139 env[1634]: time="2023-10-02T19:32:53.577067385Z" level=info msg="RemoveContainer for \"69ec8a4287ca993dfd383c020a8f7385db48dffae349e0c4230966eafb488cc5\" returns successfully" Oct 2 19:32:54.271455 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493-rootfs.mount: Deactivated successfully. Oct 2 19:32:56.298810 kubelet[2774]: E1002 19:32:56.298762 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:32:56.530583 kubelet[2774]: W1002 19:32:56.530540 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice/cri-containerd-eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493.scope WatchSource:0}: task eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493 not found: not found Oct 2 19:33:01.300442 kubelet[2774]: E1002 19:33:01.300405 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:03.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.204:22-139.178.89.65:60246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:03.084116 systemd[1]: Started sshd@8-172.31.28.204:22-139.178.89.65:60246.service. Oct 2 19:33:03.090200 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:33:03.090914 kernel: audit: type=1130 audit(1696275183.083:1164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.204:22-139.178.89.65:60246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:03.293845 kernel: audit: type=1101 audit(1696275183.286:1165): pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.286000 audit[3314]: USER_ACCT pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.294124 sshd[3314]: Accepted publickey for core from 139.178.89.65 port 60246 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:33:03.293000 audit[3314]: CRED_ACQ pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.294558 sshd[3314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:03.303707 systemd[1]: Started session-9.scope. Oct 2 19:33:03.305507 kernel: audit: type=1103 audit(1696275183.293:1166): pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.305620 kernel: audit: type=1006 audit(1696275183.293:1167): pid=3314 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:33:03.305710 kernel: audit: type=1300 audit(1696275183.293:1167): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc612a5300 a2=3 a3=0 items=0 ppid=1 pid=3314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:03.293000 audit[3314]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc612a5300 a2=3 a3=0 items=0 ppid=1 pid=3314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:03.306022 systemd-logind[1625]: New session 9 of user core. Oct 2 19:33:03.293000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:03.316071 kernel: audit: type=1327 audit(1696275183.293:1167): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:03.315000 audit[3314]: USER_START pid=3314 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.323770 kernel: audit: type=1105 audit(1696275183.315:1168): pid=3314 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.323000 audit[3316]: CRED_ACQ pid=3316 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.340034 kernel: audit: type=1103 audit(1696275183.323:1169): pid=3316 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.636790 sshd[3314]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:03.637000 audit[3314]: USER_END pid=3314 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.638000 audit[3314]: CRED_DISP pid=3314 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.654273 systemd-logind[1625]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:33:03.659753 kernel: audit: type=1106 audit(1696275183.637:1170): pid=3314 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.659947 kernel: audit: type=1104 audit(1696275183.638:1171): pid=3314 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:03.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.204:22-139.178.89.65:60246 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:03.658217 systemd[1]: sshd@8-172.31.28.204:22-139.178.89.65:60246.service: Deactivated successfully. Oct 2 19:33:03.659188 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:33:03.662026 systemd-logind[1625]: Removed session 9. Oct 2 19:33:04.248799 kubelet[2774]: E1002 19:33:04.248673 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:33:06.302400 kubelet[2774]: E1002 19:33:06.302367 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:11.304737 kubelet[2774]: E1002 19:33:11.304697 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:13.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.204:22-139.178.89.65:50020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.669286 systemd[1]: Started sshd@9-172.31.28.204:22-139.178.89.65:50020.service. Oct 2 19:33:13.673971 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:13.674617 kernel: audit: type=1130 audit(1696275193.669:1173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.204:22-139.178.89.65:50020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:13.862000 audit[3329]: USER_ACCT pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:13.863799 sshd[3329]: Accepted publickey for core from 139.178.89.65 port 50020 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:33:13.872858 kernel: audit: type=1101 audit(1696275193.862:1174): pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:13.872000 audit[3329]: CRED_ACQ pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:13.873896 sshd[3329]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:13.884693 kernel: audit: type=1103 audit(1696275193.872:1175): pid=3329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:13.884890 kernel: audit: type=1006 audit(1696275193.872:1176): pid=3329 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:33:13.884994 kernel: audit: type=1300 audit(1696275193.872:1176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5daad110 a2=3 a3=0 items=0 ppid=1 pid=3329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:13.872000 audit[3329]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5daad110 a2=3 a3=0 items=0 ppid=1 pid=3329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:13.872000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:13.897779 kernel: audit: type=1327 audit(1696275193.872:1176): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:13.902329 systemd-logind[1625]: New session 10 of user core. Oct 2 19:33:13.902612 systemd[1]: Started session-10.scope. Oct 2 19:33:13.915000 audit[3329]: USER_START pid=3329 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:13.919000 audit[3331]: CRED_ACQ pid=3331 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:13.938264 kernel: audit: type=1105 audit(1696275193.915:1177): pid=3329 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:13.938403 kernel: audit: type=1103 audit(1696275193.919:1178): pid=3331 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:14.150023 sshd[3329]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:14.154000 audit[3329]: USER_END pid=3329 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:14.160249 systemd[1]: sshd@9-172.31.28.204:22-139.178.89.65:50020.service: Deactivated successfully. Oct 2 19:33:14.163214 kernel: audit: type=1106 audit(1696275194.154:1179): pid=3329 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:14.161512 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:33:14.157000 audit[3329]: CRED_DISP pid=3329 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:14.163929 systemd-logind[1625]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:33:14.173561 kernel: audit: type=1104 audit(1696275194.157:1180): pid=3329 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:14.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.204:22-139.178.89.65:50020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:14.174135 systemd-logind[1625]: Removed session 10. Oct 2 19:33:16.305773 kubelet[2774]: E1002 19:33:16.305739 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:17.281223 env[1634]: time="2023-10-02T19:33:17.281167604Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:33:17.299979 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount66240010.mount: Deactivated successfully. Oct 2 19:33:17.311951 env[1634]: time="2023-10-02T19:33:17.311694704Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\"" Oct 2 19:33:17.313752 env[1634]: time="2023-10-02T19:33:17.313455649Z" level=info msg="StartContainer for \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\"" Oct 2 19:33:17.354928 systemd[1]: Started cri-containerd-ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8.scope. Oct 2 19:33:17.379750 systemd[1]: cri-containerd-ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8.scope: Deactivated successfully. Oct 2 19:33:17.418265 env[1634]: time="2023-10-02T19:33:17.418196519Z" level=info msg="shim disconnected" id=ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8 Oct 2 19:33:17.418265 env[1634]: time="2023-10-02T19:33:17.418262144Z" level=warning msg="cleaning up after shim disconnected" id=ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8 namespace=k8s.io Oct 2 19:33:17.418265 env[1634]: time="2023-10-02T19:33:17.418274651Z" level=info msg="cleaning up dead shim" Oct 2 19:33:17.441965 env[1634]: time="2023-10-02T19:33:17.441901196Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:33:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3365 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:33:17Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:33:17.442385 env[1634]: time="2023-10-02T19:33:17.442242507Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:33:17.442661 env[1634]: time="2023-10-02T19:33:17.442619324Z" level=error msg="Failed to pipe stdout of container \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\"" error="reading from a closed fifo" Oct 2 19:33:17.443199 env[1634]: time="2023-10-02T19:33:17.443010626Z" level=error msg="Failed to pipe stderr of container \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\"" error="reading from a closed fifo" Oct 2 19:33:17.446319 env[1634]: time="2023-10-02T19:33:17.446263864Z" level=error msg="StartContainer for \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:33:17.446606 kubelet[2774]: E1002 19:33:17.446579 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8" Oct 2 19:33:17.447078 kubelet[2774]: E1002 19:33:17.446802 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:33:17.447078 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:33:17.447078 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:33:17.447078 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f2wp9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:33:17.447078 kubelet[2774]: E1002 19:33:17.446871 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:33:17.631294 kubelet[2774]: I1002 19:33:17.631188 2774 scope.go:115] "RemoveContainer" containerID="eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493" Oct 2 19:33:17.632015 kubelet[2774]: I1002 19:33:17.631835 2774 scope.go:115] "RemoveContainer" containerID="eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493" Oct 2 19:33:17.633606 env[1634]: time="2023-10-02T19:33:17.633571893Z" level=info msg="RemoveContainer for \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\"" Oct 2 19:33:17.636498 env[1634]: time="2023-10-02T19:33:17.636463138Z" level=info msg="RemoveContainer for \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\"" Oct 2 19:33:17.636889 env[1634]: time="2023-10-02T19:33:17.636848378Z" level=error msg="RemoveContainer for \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\" failed" error="failed to set removing state for container \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\": container is already in removing state" Oct 2 19:33:17.637637 kubelet[2774]: E1002 19:33:17.637610 2774 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\": container is already in removing state" containerID="eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493" Oct 2 19:33:17.637774 kubelet[2774]: E1002 19:33:17.637658 2774 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493": container is already in removing state; Skipping pod "cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)" Oct 2 19:33:17.638059 kubelet[2774]: E1002 19:33:17.638041 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:33:17.640986 env[1634]: time="2023-10-02T19:33:17.640947855Z" level=info msg="RemoveContainer for \"eac083d0814c10b0a40dc417a50b2709228adc8ba1eb1f251629b7f8a3707493\" returns successfully" Oct 2 19:33:18.294712 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8-rootfs.mount: Deactivated successfully. Oct 2 19:33:20.523809 kubelet[2774]: W1002 19:33:20.523763 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice/cri-containerd-ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8.scope WatchSource:0}: task ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8 not found: not found Oct 2 19:33:21.307711 kubelet[2774]: E1002 19:33:21.307671 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:24.183353 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:24.183658 kernel: audit: type=1130 audit(1696275204.179:1182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.204:22-139.178.89.65:45850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.204:22-139.178.89.65:45850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:24.179992 systemd[1]: Started sshd@10-172.31.28.204:22-139.178.89.65:45850.service. Oct 2 19:33:24.360000 audit[3380]: USER_ACCT pid=3380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.367000 audit[3380]: CRED_ACQ pid=3380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.368820 sshd[3380]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:24.370608 sshd[3380]: Accepted publickey for core from 139.178.89.65 port 45850 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:33:24.375536 kernel: audit: type=1101 audit(1696275204.360:1183): pid=3380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.375647 kernel: audit: type=1103 audit(1696275204.367:1184): pid=3380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.367000 audit[3380]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd8029190 a2=3 a3=0 items=0 ppid=1 pid=3380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:24.395207 systemd[1]: Started session-11.scope. Oct 2 19:33:24.400405 systemd-logind[1625]: New session 11 of user core. Oct 2 19:33:24.410233 kernel: audit: type=1006 audit(1696275204.367:1185): pid=3380 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:33:24.410429 kernel: audit: type=1300 audit(1696275204.367:1185): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd8029190 a2=3 a3=0 items=0 ppid=1 pid=3380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:24.367000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:24.414810 kernel: audit: type=1327 audit(1696275204.367:1185): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:24.420000 audit[3380]: USER_START pid=3380 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.430000 audit[3382]: CRED_ACQ pid=3382 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.440347 kernel: audit: type=1105 audit(1696275204.420:1186): pid=3380 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.440503 kernel: audit: type=1103 audit(1696275204.430:1187): pid=3382 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.677837 sshd[3380]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:24.679000 audit[3380]: USER_END pid=3380 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.687758 kernel: audit: type=1106 audit(1696275204.679:1188): pid=3380 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.687844 systemd[1]: sshd@10-172.31.28.204:22-139.178.89.65:45850.service: Deactivated successfully. Oct 2 19:33:24.689088 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:33:24.679000 audit[3380]: CRED_DISP pid=3380 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.692366 systemd-logind[1625]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:33:24.694059 systemd-logind[1625]: Removed session 11. Oct 2 19:33:24.701846 kernel: audit: type=1104 audit(1696275204.679:1189): pid=3380 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:24.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.204:22-139.178.89.65:45850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:26.309584 kubelet[2774]: E1002 19:33:26.309557 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:31.249383 kubelet[2774]: E1002 19:33:31.249345 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:33:31.311561 kubelet[2774]: E1002 19:33:31.311445 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:34.716842 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:34.716991 kernel: audit: type=1130 audit(1696275214.705:1191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.204:22-139.178.89.65:53124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:34.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.204:22-139.178.89.65:53124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:34.705682 systemd[1]: Started sshd@11-172.31.28.204:22-139.178.89.65:53124.service. Oct 2 19:33:34.898000 audit[3393]: USER_ACCT pid=3393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:34.899774 sshd[3393]: Accepted publickey for core from 139.178.89.65 port 53124 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:33:34.905000 audit[3393]: CRED_ACQ pid=3393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:34.907309 sshd[3393]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:34.913012 kernel: audit: type=1101 audit(1696275214.898:1192): pid=3393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:34.913492 kernel: audit: type=1103 audit(1696275214.905:1193): pid=3393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:34.921017 kernel: audit: type=1006 audit(1696275214.905:1194): pid=3393 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:33:34.921126 kernel: audit: type=1300 audit(1696275214.905:1194): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd241e6b10 a2=3 a3=0 items=0 ppid=1 pid=3393 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:34.905000 audit[3393]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd241e6b10 a2=3 a3=0 items=0 ppid=1 pid=3393 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:34.920109 systemd[1]: Started session-12.scope. Oct 2 19:33:34.923361 systemd-logind[1625]: New session 12 of user core. Oct 2 19:33:34.905000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:34.932344 kernel: audit: type=1327 audit(1696275214.905:1194): proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:34.932000 audit[3393]: USER_START pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:34.945804 kernel: audit: type=1105 audit(1696275214.932:1195): pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:34.944000 audit[3395]: CRED_ACQ pid=3395 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:34.960798 kernel: audit: type=1103 audit(1696275214.944:1196): pid=3395 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:35.145245 sshd[3393]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:35.146000 audit[3393]: USER_END pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:35.152378 systemd[1]: sshd@11-172.31.28.204:22-139.178.89.65:53124.service: Deactivated successfully. Oct 2 19:33:35.153576 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:33:35.155522 systemd-logind[1625]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:33:35.157952 kernel: audit: type=1106 audit(1696275215.146:1197): pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:35.158064 kernel: audit: type=1104 audit(1696275215.147:1198): pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:35.147000 audit[3393]: CRED_DISP pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:35.157528 systemd-logind[1625]: Removed session 12. Oct 2 19:33:35.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.204:22-139.178.89.65:53124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:36.315301 kubelet[2774]: E1002 19:33:36.315213 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:41.318961 kubelet[2774]: E1002 19:33:41.318930 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:43.663000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:43.665444 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:33:43.665547 kernel: audit: type=1400 audit(1696275223.663:1201): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:43.663000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:43.677801 kernel: audit: type=1400 audit(1696275223.663:1200): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:43.677937 kernel: audit: type=1300 audit(1696275223.663:1200): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001805890 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:43.663000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001805890 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:43.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:43.710623 kernel: audit: type=1327 audit(1696275223.663:1200): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:43.710890 kernel: audit: type=1300 audit(1696275223.663:1201): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0007bf960 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:43.663000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0007bf960 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:43.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:43.734339 kernel: audit: type=1327 audit(1696275223.663:1201): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:44.249435 kubelet[2774]: E1002 19:33:44.249398 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:33:45.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.204:22-139.178.89.65:48622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:45.174553 systemd[1]: Started sshd@12-172.31.28.204:22-139.178.89.65:48622.service. Oct 2 19:33:45.187852 kernel: audit: type=1130 audit(1696275225.174:1202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.204:22-139.178.89.65:48622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:45.353000 audit[3408]: USER_ACCT pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.354891 sshd[3408]: Accepted publickey for core from 139.178.89.65 port 48622 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:33:45.364110 kernel: audit: type=1101 audit(1696275225.353:1203): pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.363000 audit[3408]: CRED_ACQ pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.365856 sshd[3408]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:45.381944 kernel: audit: type=1103 audit(1696275225.363:1204): pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.382965 kernel: audit: type=1006 audit(1696275225.363:1205): pid=3408 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:33:45.363000 audit[3408]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8926c870 a2=3 a3=0 items=0 ppid=1 pid=3408 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:45.363000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:45.387126 systemd-logind[1625]: New session 13 of user core. Oct 2 19:33:45.387474 systemd[1]: Started session-13.scope. Oct 2 19:33:45.413000 audit[3408]: USER_START pid=3408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.417000 audit[3410]: CRED_ACQ pid=3410 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.616082 sshd[3408]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:45.616000 audit[3408]: USER_END pid=3408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.617000 audit[3408]: CRED_DISP pid=3408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:45.619410 systemd[1]: sshd@12-172.31.28.204:22-139.178.89.65:48622.service: Deactivated successfully. Oct 2 19:33:45.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.204:22-139.178.89.65:48622 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:45.620445 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:33:45.621341 systemd-logind[1625]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:33:45.622297 systemd-logind[1625]: Removed session 13. Oct 2 19:33:46.321005 kubelet[2774]: E1002 19:33:46.320967 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:46.836000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:46.836000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:46.836000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00989a330 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:33:46.836000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:33:46.836000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00173d040 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:33:46.836000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:33:46.838000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:46.838000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00989a3f0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:33:46.838000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:33:46.845000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:46.845000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ddfed20 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:33:46.845000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:33:46.965000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:46.965000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:46.965000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c002598b60 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:33:46.965000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:33:46.965000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ddfed50 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:33:46.965000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:33:51.323404 kubelet[2774]: E1002 19:33:51.323375 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:33:51.694467 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:33:51.694633 kernel: audit: type=1400 audit(1696275231.689:1217): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.689000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.689000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.703752 kernel: audit: type=1400 audit(1696275231.689:1218): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.689000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001799fa0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:51.710798 kernel: audit: type=1300 audit(1696275231.689:1217): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001799fa0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:51.729392 kernel: audit: type=1327 audit(1696275231.689:1217): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:51.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:51.689000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.744885 kernel: audit: type=1400 audit(1696275231.689:1219): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.745041 kernel: audit: type=1300 audit(1696275231.689:1219): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001799fe0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:51.689000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001799fe0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:51.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:51.758947 kernel: audit: type=1327 audit(1696275231.689:1219): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:51.690000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.771848 kernel: audit: type=1400 audit(1696275231.690:1220): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:33:51.690000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0018264c0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:51.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:51.801128 kernel: audit: type=1300 audit(1696275231.690:1220): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0018264c0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:51.801344 kernel: audit: type=1327 audit(1696275231.690:1220): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:51.689000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c0011e5b40 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:33:51.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:33:55.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.204:22-139.178.89.65:50030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:55.651067 systemd[1]: Started sshd@13-172.31.28.204:22-139.178.89.65:50030.service. Oct 2 19:33:55.829000 audit[3423]: USER_ACCT pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:55.830159 sshd[3423]: Accepted publickey for core from 139.178.89.65 port 50030 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:33:55.830000 audit[3423]: CRED_ACQ pid=3423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:55.830000 audit[3423]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe264dd1e0 a2=3 a3=0 items=0 ppid=1 pid=3423 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:33:55.830000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:33:55.831713 sshd[3423]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:33:55.837797 systemd[1]: Started session-14.scope. Oct 2 19:33:55.838456 systemd-logind[1625]: New session 14 of user core. Oct 2 19:33:55.843000 audit[3423]: USER_START pid=3423 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:55.845000 audit[3425]: CRED_ACQ pid=3425 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:56.042182 sshd[3423]: pam_unix(sshd:session): session closed for user core Oct 2 19:33:56.043000 audit[3423]: USER_END pid=3423 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:56.044000 audit[3423]: CRED_DISP pid=3423 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:33:56.046637 systemd[1]: sshd@13-172.31.28.204:22-139.178.89.65:50030.service: Deactivated successfully. Oct 2 19:33:56.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.204:22-139.178.89.65:50030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:33:56.047676 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:33:56.048492 systemd-logind[1625]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:33:56.049648 systemd-logind[1625]: Removed session 14. Oct 2 19:33:56.249374 kubelet[2774]: E1002 19:33:56.249296 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:33:56.325552 kubelet[2774]: E1002 19:33:56.325219 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:01.326700 kubelet[2774]: E1002 19:34:01.326661 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:06.070810 systemd[1]: Started sshd@14-172.31.28.204:22-139.178.89.65:54978.service. Oct 2 19:34:06.079684 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:34:06.079841 kernel: audit: type=1130 audit(1696275246.070:1230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.204:22-139.178.89.65:54978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:06.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.204:22-139.178.89.65:54978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:06.239000 audit[3435]: USER_ACCT pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.240335 sshd[3435]: Accepted publickey for core from 139.178.89.65 port 54978 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:34:06.251740 kernel: audit: type=1101 audit(1696275246.239:1231): pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.251880 kernel: audit: type=1103 audit(1696275246.246:1232): pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.246000 audit[3435]: CRED_ACQ pid=3435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.247598 sshd[3435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:06.254914 kernel: audit: type=1006 audit(1696275246.246:1233): pid=3435 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:34:06.259026 kernel: audit: type=1300 audit(1696275246.246:1233): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5cbd0b50 a2=3 a3=0 items=0 ppid=1 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:06.246000 audit[3435]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5cbd0b50 a2=3 a3=0 items=0 ppid=1 pid=3435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:06.268852 kernel: audit: type=1327 audit(1696275246.246:1233): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:06.246000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:06.260982 systemd[1]: Started session-15.scope. Oct 2 19:34:06.273036 systemd-logind[1625]: New session 15 of user core. Oct 2 19:34:06.296000 audit[3435]: USER_START pid=3435 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.301000 audit[3437]: CRED_ACQ pid=3437 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.315770 kernel: audit: type=1105 audit(1696275246.296:1234): pid=3435 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.315944 kernel: audit: type=1103 audit(1696275246.301:1235): pid=3437 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.327697 kubelet[2774]: E1002 19:34:06.327589 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:06.522384 sshd[3435]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:06.523000 audit[3435]: USER_END pid=3435 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.529606 systemd-logind[1625]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:34:06.524000 audit[3435]: CRED_DISP pid=3435 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.532439 systemd[1]: sshd@14-172.31.28.204:22-139.178.89.65:54978.service: Deactivated successfully. Oct 2 19:34:06.533771 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:34:06.536714 systemd-logind[1625]: Removed session 15. Oct 2 19:34:06.547966 kernel: audit: type=1106 audit(1696275246.523:1236): pid=3435 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.548092 kernel: audit: type=1104 audit(1696275246.524:1237): pid=3435 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:06.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.204:22-139.178.89.65:54978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:10.251991 env[1634]: time="2023-10-02T19:34:10.251927886Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:34:10.281123 env[1634]: time="2023-10-02T19:34:10.281046045Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\"" Oct 2 19:34:10.282672 env[1634]: time="2023-10-02T19:34:10.282634123Z" level=info msg="StartContainer for \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\"" Oct 2 19:34:10.355465 systemd[1]: run-containerd-runc-k8s.io-cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0-runc.oMSRbE.mount: Deactivated successfully. Oct 2 19:34:10.357476 systemd[1]: Started cri-containerd-cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0.scope. Oct 2 19:34:10.375002 systemd[1]: cri-containerd-cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0.scope: Deactivated successfully. Oct 2 19:34:10.401772 env[1634]: time="2023-10-02T19:34:10.401695924Z" level=info msg="shim disconnected" id=cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0 Oct 2 19:34:10.401772 env[1634]: time="2023-10-02T19:34:10.401772721Z" level=warning msg="cleaning up after shim disconnected" id=cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0 namespace=k8s.io Oct 2 19:34:10.402149 env[1634]: time="2023-10-02T19:34:10.401784547Z" level=info msg="cleaning up dead shim" Oct 2 19:34:10.412982 env[1634]: time="2023-10-02T19:34:10.412927364Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:34:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3474 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:34:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:34:10.413271 env[1634]: time="2023-10-02T19:34:10.413208866Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:34:10.413514 env[1634]: time="2023-10-02T19:34:10.413476496Z" level=error msg="Failed to pipe stderr of container \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\"" error="reading from a closed fifo" Oct 2 19:34:10.413841 env[1634]: time="2023-10-02T19:34:10.413797689Z" level=error msg="Failed to pipe stdout of container \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\"" error="reading from a closed fifo" Oct 2 19:34:10.416317 env[1634]: time="2023-10-02T19:34:10.416252283Z" level=error msg="StartContainer for \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:34:10.416818 kubelet[2774]: E1002 19:34:10.416571 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0" Oct 2 19:34:10.416818 kubelet[2774]: E1002 19:34:10.416689 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:34:10.416818 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:34:10.416818 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:34:10.416818 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f2wp9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:34:10.416818 kubelet[2774]: E1002 19:34:10.416772 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:34:10.785023 kubelet[2774]: I1002 19:34:10.784936 2774 scope.go:115] "RemoveContainer" containerID="ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8" Oct 2 19:34:10.787014 kubelet[2774]: I1002 19:34:10.786988 2774 scope.go:115] "RemoveContainer" containerID="ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8" Oct 2 19:34:10.795090 env[1634]: time="2023-10-02T19:34:10.795045396Z" level=info msg="RemoveContainer for \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\"" Oct 2 19:34:10.795816 env[1634]: time="2023-10-02T19:34:10.795762492Z" level=info msg="RemoveContainer for \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\"" Oct 2 19:34:10.795962 env[1634]: time="2023-10-02T19:34:10.795865994Z" level=error msg="RemoveContainer for \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\" failed" error="failed to set removing state for container \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\": container is already in removing state" Oct 2 19:34:10.796325 kubelet[2774]: E1002 19:34:10.796205 2774 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\": container is already in removing state" containerID="ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8" Oct 2 19:34:10.796325 kubelet[2774]: E1002 19:34:10.796258 2774 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8": container is already in removing state; Skipping pod "cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)" Oct 2 19:34:10.796993 kubelet[2774]: E1002 19:34:10.796968 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:34:10.809451 env[1634]: time="2023-10-02T19:34:10.809392022Z" level=info msg="RemoveContainer for \"ef8d37c0468287b2ab69ad3864ef69c725f7e19379f091ec3cc642243ab29cd8\" returns successfully" Oct 2 19:34:11.269389 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0-rootfs.mount: Deactivated successfully. Oct 2 19:34:11.328899 kubelet[2774]: E1002 19:34:11.328868 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:13.508987 kubelet[2774]: W1002 19:34:13.508944 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice/cri-containerd-cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0.scope WatchSource:0}: task cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0 not found: not found Oct 2 19:34:16.329989 kubelet[2774]: E1002 19:34:16.329949 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:16.558373 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:34:16.558513 kernel: audit: type=1130 audit(1696275256.548:1239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.204:22-139.178.89.65:45360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.204:22-139.178.89.65:45360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.548651 systemd[1]: Started sshd@15-172.31.28.204:22-139.178.89.65:45360.service. Oct 2 19:34:16.718000 audit[3487]: USER_ACCT pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.725498 sshd[3487]: Accepted publickey for core from 139.178.89.65 port 45360 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:34:16.725932 kernel: audit: type=1101 audit(1696275256.718:1240): pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.725000 audit[3487]: CRED_ACQ pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.727878 sshd[3487]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:16.736919 systemd[1]: Started session-16.scope. Oct 2 19:34:16.740632 kernel: audit: type=1103 audit(1696275256.725:1241): pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.740748 kernel: audit: type=1006 audit(1696275256.725:1242): pid=3487 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:34:16.740782 kernel: audit: type=1300 audit(1696275256.725:1242): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3eb161b0 a2=3 a3=0 items=0 ppid=1 pid=3487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:16.725000 audit[3487]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3eb161b0 a2=3 a3=0 items=0 ppid=1 pid=3487 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:16.739809 systemd-logind[1625]: New session 16 of user core. Oct 2 19:34:16.725000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:16.751744 kernel: audit: type=1327 audit(1696275256.725:1242): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:16.752000 audit[3487]: USER_START pid=3487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.752000 audit[3489]: CRED_ACQ pid=3489 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.766889 kernel: audit: type=1105 audit(1696275256.752:1243): pid=3487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.766945 kernel: audit: type=1103 audit(1696275256.752:1244): pid=3489 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.955031 sshd[3487]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:16.957000 audit[3487]: USER_END pid=3487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.972468 kernel: audit: type=1106 audit(1696275256.957:1245): pid=3487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.972593 kernel: audit: type=1104 audit(1696275256.957:1246): pid=3487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.957000 audit[3487]: CRED_DISP pid=3487 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:16.967924 systemd-logind[1625]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:34:16.970039 systemd[1]: sshd@15-172.31.28.204:22-139.178.89.65:45360.service: Deactivated successfully. Oct 2 19:34:16.971374 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:34:16.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.204:22-139.178.89.65:45360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:16.973789 systemd-logind[1625]: Removed session 16. Oct 2 19:34:21.331602 kubelet[2774]: E1002 19:34:21.331224 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:22.249107 kubelet[2774]: E1002 19:34:22.249070 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:34:26.332956 kubelet[2774]: E1002 19:34:26.332923 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:26.982492 systemd[1]: Started sshd@16-172.31.28.204:22-139.178.89.65:59832.service. Oct 2 19:34:26.993574 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:34:26.993808 kernel: audit: type=1130 audit(1696275266.982:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.204:22-139.178.89.65:59832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:26.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.204:22-139.178.89.65:59832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.148000 audit[3501]: USER_ACCT pid=3501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.150005 sshd[3501]: Accepted publickey for core from 139.178.89.65 port 59832 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:34:27.157824 kernel: audit: type=1101 audit(1696275267.148:1249): pid=3501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.158000 audit[3501]: CRED_ACQ pid=3501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.159505 sshd[3501]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:27.165749 kernel: audit: type=1103 audit(1696275267.158:1250): pid=3501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.165856 kernel: audit: type=1006 audit(1696275267.158:1251): pid=3501 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:34:27.168149 systemd[1]: Started session-17.scope. Oct 2 19:34:27.169784 systemd-logind[1625]: New session 17 of user core. Oct 2 19:34:27.158000 audit[3501]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbfcfc620 a2=3 a3=0 items=0 ppid=1 pid=3501 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.181835 kernel: audit: type=1300 audit(1696275267.158:1251): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbfcfc620 a2=3 a3=0 items=0 ppid=1 pid=3501 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.181975 kernel: audit: type=1327 audit(1696275267.158:1251): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:27.158000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:27.189000 audit[3501]: USER_START pid=3501 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.192000 audit[3503]: CRED_ACQ pid=3503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.203500 kernel: audit: type=1105 audit(1696275267.189:1252): pid=3501 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.203647 kernel: audit: type=1103 audit(1696275267.192:1253): pid=3503 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.385837 sshd[3501]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:27.386000 audit[3501]: USER_END pid=3501 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.387000 audit[3501]: CRED_DISP pid=3501 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.396323 systemd[1]: sshd@16-172.31.28.204:22-139.178.89.65:59832.service: Deactivated successfully. Oct 2 19:34:27.397364 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:34:27.399607 systemd-logind[1625]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:34:27.400813 kernel: audit: type=1106 audit(1696275267.386:1254): pid=3501 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.400889 kernel: audit: type=1104 audit(1696275267.387:1255): pid=3501 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.395000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.204:22-139.178.89.65:59832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.401286 systemd-logind[1625]: Removed session 17. Oct 2 19:34:27.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.28.204:22-139.178.89.65:59842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:27.426274 systemd[1]: Started sshd@17-172.31.28.204:22-139.178.89.65:59842.service. Oct 2 19:34:27.607000 audit[3514]: USER_ACCT pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.608589 sshd[3514]: Accepted publickey for core from 139.178.89.65 port 59842 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:34:27.609000 audit[3514]: CRED_ACQ pid=3514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.609000 audit[3514]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde82f6cf0 a2=3 a3=0 items=0 ppid=1 pid=3514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:27.609000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:27.610422 sshd[3514]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:27.631165 systemd-logind[1625]: New session 18 of user core. Oct 2 19:34:27.631402 systemd[1]: Started session-18.scope. Oct 2 19:34:27.638000 audit[3514]: USER_START pid=3514 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:27.641000 audit[3516]: CRED_ACQ pid=3516 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.072858 sshd[3514]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:29.076000 audit[3514]: USER_END pid=3514 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.076000 audit[3514]: CRED_DISP pid=3514 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.086580 systemd[1]: sshd@17-172.31.28.204:22-139.178.89.65:59842.service: Deactivated successfully. Oct 2 19:34:29.087778 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:34:29.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.28.204:22-139.178.89.65:59842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:29.089490 systemd-logind[1625]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:34:29.098013 systemd-logind[1625]: Removed session 18. Oct 2 19:34:29.102379 systemd[1]: Started sshd@18-172.31.28.204:22-139.178.89.65:59856.service. Oct 2 19:34:29.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.28.204:22-139.178.89.65:59856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:29.302000 audit[3523]: USER_ACCT pid=3523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.303685 sshd[3523]: Accepted publickey for core from 139.178.89.65 port 59856 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:34:29.303000 audit[3523]: CRED_ACQ pid=3523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.304000 audit[3523]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe38e7bd40 a2=3 a3=0 items=0 ppid=1 pid=3523 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:29.304000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:29.305303 sshd[3523]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:29.311454 systemd[1]: Started session-19.scope. Oct 2 19:34:29.311978 systemd-logind[1625]: New session 19 of user core. Oct 2 19:34:29.317000 audit[3523]: USER_START pid=3523 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.319000 audit[3525]: CRED_ACQ pid=3525 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.544562 sshd[3523]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:29.547000 audit[3523]: USER_END pid=3523 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.547000 audit[3523]: CRED_DISP pid=3523 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:29.550906 systemd[1]: sshd@18-172.31.28.204:22-139.178.89.65:59856.service: Deactivated successfully. Oct 2 19:34:29.550000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.28.204:22-139.178.89.65:59856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:29.552211 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:34:29.553269 systemd-logind[1625]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:34:29.554372 systemd-logind[1625]: Removed session 19. Oct 2 19:34:31.333946 kubelet[2774]: E1002 19:34:31.333908 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:36.249203 kubelet[2774]: E1002 19:34:36.249162 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:34:36.337672 kubelet[2774]: E1002 19:34:36.337634 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:39.580386 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:34:39.580543 kernel: audit: type=1130 audit(1696275279.571:1275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.204:22-139.178.89.65:56776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:39.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.204:22-139.178.89.65:56776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:39.572465 systemd[1]: Started sshd@19-172.31.28.204:22-139.178.89.65:56776.service. Oct 2 19:34:39.745000 audit[3537]: USER_ACCT pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.746485 sshd[3537]: Accepted publickey for core from 139.178.89.65 port 56776 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:34:39.755440 kernel: audit: type=1101 audit(1696275279.745:1276): pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.755000 audit[3537]: CRED_ACQ pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.756817 sshd[3537]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:39.766133 kernel: audit: type=1103 audit(1696275279.755:1277): pid=3537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.766248 kernel: audit: type=1006 audit(1696275279.755:1278): pid=3537 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:34:39.768024 systemd[1]: Started session-20.scope. Oct 2 19:34:39.755000 audit[3537]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0b580740 a2=3 a3=0 items=0 ppid=1 pid=3537 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:39.769802 systemd-logind[1625]: New session 20 of user core. Oct 2 19:34:39.755000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:39.784937 kernel: audit: type=1300 audit(1696275279.755:1278): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0b580740 a2=3 a3=0 items=0 ppid=1 pid=3537 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:39.785116 kernel: audit: type=1327 audit(1696275279.755:1278): proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:39.785229 kernel: audit: type=1105 audit(1696275279.781:1279): pid=3537 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.781000 audit[3537]: USER_START pid=3537 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.785000 audit[3539]: CRED_ACQ pid=3539 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.797626 kernel: audit: type=1103 audit(1696275279.785:1280): pid=3539 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.985270 sshd[3537]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:39.989000 audit[3537]: USER_END pid=3537 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:39.994702 systemd-logind[1625]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:34:40.014839 kernel: audit: type=1106 audit(1696275279.989:1281): pid=3537 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:40.012710 systemd[1]: sshd@19-172.31.28.204:22-139.178.89.65:56776.service: Deactivated successfully. Oct 2 19:34:40.014169 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:34:39.989000 audit[3537]: CRED_DISP pid=3537 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:40.017061 systemd-logind[1625]: Removed session 20. Oct 2 19:34:40.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.204:22-139.178.89.65:56776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:40.023891 kernel: audit: type=1104 audit(1696275279.989:1282): pid=3537 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:41.339487 kubelet[2774]: E1002 19:34:41.339453 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:43.664000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:43.664000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:43.664000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00240c3a0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:34:43.664000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:43.664000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001345c50 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:34:43.664000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:46.340612 kubelet[2774]: E1002 19:34:46.340577 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:46.837000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.840003 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:34:46.840091 kernel: audit: type=1400 audit(1696275286.837:1286): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.845744 kernel: audit: type=1400 audit(1696275286.837:1287): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.837000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.837000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0045d64e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.858288 kernel: audit: type=1300 audit(1696275286.837:1287): arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0045d64e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.858410 kernel: audit: type=1327 audit(1696275286.837:1287): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.837000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.837000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c013b71fe0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.871253 kernel: audit: type=1300 audit(1696275286.837:1286): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c013b71fe0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.871387 kernel: audit: type=1327 audit(1696275286.837:1286): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.837000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.839000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.883415 kernel: audit: type=1400 audit(1696275286.839:1288): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.883620 kernel: audit: type=1300 audit(1696275286.839:1288): arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c004308000 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.839000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c004308000 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.839000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.903106 kernel: audit: type=1327 audit(1696275286.839:1288): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.903244 kernel: audit: type=1400 audit(1696275286.845:1289): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.845000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.845000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c004308030 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.845000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.966000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.966000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:46.966000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c013b78120 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.966000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0045d6990 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:34:46.966000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:46.966000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:34:48.249493 kubelet[2774]: E1002 19:34:48.249448 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:34:50.010383 systemd[1]: Started sshd@20-172.31.28.204:22-139.178.89.65:53136.service. Oct 2 19:34:50.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.204:22-139.178.89.65:53136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.187000 audit[3549]: USER_ACCT pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:50.188505 sshd[3549]: Accepted publickey for core from 139.178.89.65 port 53136 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:34:50.189000 audit[3549]: CRED_ACQ pid=3549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:50.189000 audit[3549]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd3b7675c0 a2=3 a3=0 items=0 ppid=1 pid=3549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:34:50.189000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:34:50.190918 sshd[3549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:34:50.196476 systemd[1]: Started session-21.scope. Oct 2 19:34:50.197058 systemd-logind[1625]: New session 21 of user core. Oct 2 19:34:50.202000 audit[3549]: USER_START pid=3549 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:50.203000 audit[3551]: CRED_ACQ pid=3551 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:50.412689 sshd[3549]: pam_unix(sshd:session): session closed for user core Oct 2 19:34:50.414000 audit[3549]: USER_END pid=3549 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:50.414000 audit[3549]: CRED_DISP pid=3549 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:34:50.417423 systemd[1]: sshd@20-172.31.28.204:22-139.178.89.65:53136.service: Deactivated successfully. Oct 2 19:34:50.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.204:22-139.178.89.65:53136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:34:50.418358 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:34:50.419442 systemd-logind[1625]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:34:50.420307 systemd-logind[1625]: Removed session 21. Oct 2 19:34:51.341872 kubelet[2774]: E1002 19:34:51.341830 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:34:51.689000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:51.689000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00240d8e0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:34:51.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:51.689000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:51.689000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00240d920 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:34:51.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:51.691000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:51.691000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00240da60 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:34:51.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:51.698000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:34:51.698000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002468a00 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:34:51.698000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:34:56.343688 kubelet[2774]: E1002 19:34:56.343652 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:00.442893 systemd[1]: Started sshd@21-172.31.28.204:22-139.178.89.65:53386.service. Oct 2 19:35:00.453799 kernel: kauditd_printk_skb: 31 callbacks suppressed Oct 2 19:35:00.453953 kernel: audit: type=1130 audit(1696275300.443:1305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.204:22-139.178.89.65:53386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.204:22-139.178.89.65:53386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.641000 audit[3564]: USER_ACCT pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.642385 sshd[3564]: Accepted publickey for core from 139.178.89.65 port 53386 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:35:00.656994 kernel: audit: type=1101 audit(1696275300.641:1306): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.656000 audit[3564]: CRED_ACQ pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.658247 sshd[3564]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:00.667170 kernel: audit: type=1103 audit(1696275300.656:1307): pid=3564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.667291 kernel: audit: type=1006 audit(1696275300.657:1308): pid=3564 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:35:00.670020 systemd[1]: Started session-22.scope. Oct 2 19:35:00.657000 audit[3564]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff315ba1e0 a2=3 a3=0 items=0 ppid=1 pid=3564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:00.674851 systemd-logind[1625]: New session 22 of user core. Oct 2 19:35:00.683066 kernel: audit: type=1300 audit(1696275300.657:1308): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff315ba1e0 a2=3 a3=0 items=0 ppid=1 pid=3564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:00.683921 kernel: audit: type=1327 audit(1696275300.657:1308): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:00.657000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:00.686000 audit[3564]: USER_START pid=3564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.698000 audit[3566]: CRED_ACQ pid=3566 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.723741 kernel: audit: type=1105 audit(1696275300.686:1309): pid=3564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.723903 kernel: audit: type=1103 audit(1696275300.698:1310): pid=3566 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.934097 sshd[3564]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:00.935000 audit[3564]: USER_END pid=3564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.948837 kernel: audit: type=1106 audit(1696275300.935:1311): pid=3564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.935000 audit[3564]: CRED_DISP pid=3564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.950328 systemd-logind[1625]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:35:00.953467 systemd[1]: sshd@21-172.31.28.204:22-139.178.89.65:53386.service: Deactivated successfully. Oct 2 19:35:00.960767 kernel: audit: type=1104 audit(1696275300.935:1312): pid=3564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:00.955672 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:35:00.953000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.204:22-139.178.89.65:53386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:00.962433 systemd-logind[1625]: Removed session 22. Oct 2 19:35:01.345512 kubelet[2774]: E1002 19:35:01.345473 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:03.249809 kubelet[2774]: E1002 19:35:03.249773 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:35:06.346308 kubelet[2774]: E1002 19:35:06.346280 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:10.964799 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:35:10.964946 kernel: audit: type=1130 audit(1696275310.960:1314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.204:22-139.178.89.65:51278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:10.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.204:22-139.178.89.65:51278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:10.961253 systemd[1]: Started sshd@22-172.31.28.204:22-139.178.89.65:51278.service. Oct 2 19:35:11.129000 audit[3578]: USER_ACCT pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.131010 sshd[3578]: Accepted publickey for core from 139.178.89.65 port 51278 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:35:11.138519 kernel: audit: type=1101 audit(1696275311.129:1315): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.138791 sshd[3578]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:11.137000 audit[3578]: CRED_ACQ pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.150264 kernel: audit: type=1103 audit(1696275311.137:1316): pid=3578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.150386 kernel: audit: type=1006 audit(1696275311.137:1317): pid=3578 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:35:11.150421 kernel: audit: type=1300 audit(1696275311.137:1317): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc746517f0 a2=3 a3=0 items=0 ppid=1 pid=3578 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:11.137000 audit[3578]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc746517f0 a2=3 a3=0 items=0 ppid=1 pid=3578 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:11.152399 systemd[1]: Started session-23.scope. Oct 2 19:35:11.154388 systemd-logind[1625]: New session 23 of user core. Oct 2 19:35:11.137000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:11.159757 kernel: audit: type=1327 audit(1696275311.137:1317): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:11.163000 audit[3578]: USER_START pid=3578 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.171755 kernel: audit: type=1105 audit(1696275311.163:1318): pid=3578 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.166000 audit[3580]: CRED_ACQ pid=3580 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.177762 kernel: audit: type=1103 audit(1696275311.166:1319): pid=3580 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.348028 kubelet[2774]: E1002 19:35:11.347984 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:11.367448 sshd[3578]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:11.368000 audit[3578]: USER_END pid=3578 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.376785 kernel: audit: type=1106 audit(1696275311.368:1320): pid=3578 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.382839 kernel: audit: type=1104 audit(1696275311.368:1321): pid=3578 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.368000 audit[3578]: CRED_DISP pid=3578 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:11.378581 systemd-logind[1625]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:35:11.380219 systemd[1]: sshd@22-172.31.28.204:22-139.178.89.65:51278.service: Deactivated successfully. Oct 2 19:35:11.381672 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:35:11.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.204:22-139.178.89.65:51278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:11.383703 systemd-logind[1625]: Removed session 23. Oct 2 19:35:14.248752 kubelet[2774]: E1002 19:35:14.248702 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:35:16.349904 kubelet[2774]: E1002 19:35:16.349820 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:21.351901 kubelet[2774]: E1002 19:35:21.351872 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:21.398270 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:35:21.398430 kernel: audit: type=1130 audit(1696275321.395:1323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.204:22-139.178.89.65:33750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:21.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.204:22-139.178.89.65:33750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:21.395474 systemd[1]: Started sshd@23-172.31.28.204:22-139.178.89.65:33750.service. Oct 2 19:35:21.573000 audit[3590]: USER_ACCT pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.582930 kernel: audit: type=1101 audit(1696275321.573:1324): pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.582979 sshd[3590]: Accepted publickey for core from 139.178.89.65 port 33750 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:35:21.582000 audit[3590]: CRED_ACQ pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.583841 sshd[3590]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:21.591006 systemd[1]: Started session-24.scope. Oct 2 19:35:21.593565 kernel: audit: type=1103 audit(1696275321.582:1325): pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.593687 kernel: audit: type=1006 audit(1696275321.582:1326): pid=3590 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:35:21.593775 kernel: audit: type=1300 audit(1696275321.582:1326): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc91cf70 a2=3 a3=0 items=0 ppid=1 pid=3590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:21.582000 audit[3590]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc91cf70 a2=3 a3=0 items=0 ppid=1 pid=3590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:21.594059 systemd-logind[1625]: New session 24 of user core. Oct 2 19:35:21.601775 kernel: audit: type=1327 audit(1696275321.582:1326): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:21.582000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:21.604464 kernel: audit: type=1105 audit(1696275321.600:1327): pid=3590 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.600000 audit[3590]: USER_START pid=3590 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.604000 audit[3592]: CRED_ACQ pid=3592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.615878 kernel: audit: type=1103 audit(1696275321.604:1328): pid=3592 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.848707 sshd[3590]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:21.850000 audit[3590]: USER_END pid=3590 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.857604 systemd[1]: sshd@23-172.31.28.204:22-139.178.89.65:33750.service: Deactivated successfully. Oct 2 19:35:21.859668 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:35:21.852000 audit[3590]: CRED_DISP pid=3590 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.868740 systemd-logind[1625]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:35:21.870468 systemd-logind[1625]: Removed session 24. Oct 2 19:35:21.873219 kernel: audit: type=1106 audit(1696275321.850:1329): pid=3590 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.873312 kernel: audit: type=1104 audit(1696275321.852:1330): pid=3590 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:21.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.204:22-139.178.89.65:33750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:25.248866 kubelet[2774]: E1002 19:35:25.248612 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:35:26.353449 kubelet[2774]: E1002 19:35:26.353404 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:31.354558 kubelet[2774]: E1002 19:35:31.354527 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:31.885914 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:35:31.886073 kernel: audit: type=1130 audit(1696275331.877:1332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.204:22-139.178.89.65:51790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:31.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.204:22-139.178.89.65:51790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:31.877872 systemd[1]: Started sshd@24-172.31.28.204:22-139.178.89.65:51790.service. Oct 2 19:35:32.048000 audit[3602]: USER_ACCT pid=3602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.049431 sshd[3602]: Accepted publickey for core from 139.178.89.65 port 51790 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:35:32.055848 kernel: audit: type=1101 audit(1696275332.048:1333): pid=3602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.055000 audit[3602]: CRED_ACQ pid=3602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.057773 sshd[3602]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:32.066054 systemd[1]: Started session-25.scope. Oct 2 19:35:32.070079 kernel: audit: type=1103 audit(1696275332.055:1334): pid=3602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.070174 kernel: audit: type=1006 audit(1696275332.055:1335): pid=3602 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:35:32.070273 kernel: audit: type=1300 audit(1696275332.055:1335): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeadd69fd0 a2=3 a3=0 items=0 ppid=1 pid=3602 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:32.055000 audit[3602]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeadd69fd0 a2=3 a3=0 items=0 ppid=1 pid=3602 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:32.073654 systemd-logind[1625]: New session 25 of user core. Oct 2 19:35:32.055000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:32.083010 kernel: audit: type=1327 audit(1696275332.055:1335): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:32.083107 kernel: audit: type=1105 audit(1696275332.080:1336): pid=3602 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.080000 audit[3602]: USER_START pid=3602 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.112346 kernel: audit: type=1103 audit(1696275332.080:1337): pid=3604 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.080000 audit[3604]: CRED_ACQ pid=3604 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.298379 sshd[3602]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:32.299000 audit[3602]: USER_END pid=3602 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.299000 audit[3602]: CRED_DISP pid=3602 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.310527 systemd[1]: sshd@24-172.31.28.204:22-139.178.89.65:51790.service: Deactivated successfully. Oct 2 19:35:32.313002 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:35:32.315983 systemd-logind[1625]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:35:32.316977 kernel: audit: type=1106 audit(1696275332.299:1338): pid=3602 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.317255 kernel: audit: type=1104 audit(1696275332.299:1339): pid=3602 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:32.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.204:22-139.178.89.65:51790 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:32.318488 systemd-logind[1625]: Removed session 25. Oct 2 19:35:36.251082 env[1634]: time="2023-10-02T19:35:36.251025937Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:35:36.276866 env[1634]: time="2023-10-02T19:35:36.276799676Z" level=info msg="CreateContainer within sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\"" Oct 2 19:35:36.281661 env[1634]: time="2023-10-02T19:35:36.281618212Z" level=info msg="StartContainer for \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\"" Oct 2 19:35:36.321169 systemd[1]: run-containerd-runc-k8s.io-633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66-runc.PKcGex.mount: Deactivated successfully. Oct 2 19:35:36.329089 systemd[1]: Started cri-containerd-633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66.scope. Oct 2 19:35:36.340029 systemd[1]: cri-containerd-633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66.scope: Deactivated successfully. Oct 2 19:35:36.340406 systemd[1]: Stopped cri-containerd-633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66.scope. Oct 2 19:35:36.355373 kubelet[2774]: E1002 19:35:36.355339 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:36.427090 env[1634]: time="2023-10-02T19:35:36.427015320Z" level=info msg="shim disconnected" id=633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66 Oct 2 19:35:36.427090 env[1634]: time="2023-10-02T19:35:36.427078985Z" level=warning msg="cleaning up after shim disconnected" id=633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66 namespace=k8s.io Oct 2 19:35:36.427090 env[1634]: time="2023-10-02T19:35:36.427092124Z" level=info msg="cleaning up dead shim" Oct 2 19:35:36.439386 env[1634]: time="2023-10-02T19:35:36.436950171Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:35:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3636 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:35:36Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:35:36.439386 env[1634]: time="2023-10-02T19:35:36.437269719Z" level=error msg="copy shim log" error="read /proc/self/fd/49: file already closed" Oct 2 19:35:36.439386 env[1634]: time="2023-10-02T19:35:36.438717594Z" level=error msg="Failed to pipe stdout of container \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\"" error="reading from a closed fifo" Oct 2 19:35:36.439386 env[1634]: time="2023-10-02T19:35:36.438819749Z" level=error msg="Failed to pipe stderr of container \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\"" error="reading from a closed fifo" Oct 2 19:35:36.441840 env[1634]: time="2023-10-02T19:35:36.441695772Z" level=error msg="StartContainer for \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:35:36.442022 kubelet[2774]: E1002 19:35:36.441995 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66" Oct 2 19:35:36.442142 kubelet[2774]: E1002 19:35:36.442119 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:35:36.442142 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:35:36.442142 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:35:36.442142 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-f2wp9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:35:36.442358 kubelet[2774]: E1002 19:35:36.442166 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:35:36.969239 kubelet[2774]: I1002 19:35:36.969201 2774 scope.go:115] "RemoveContainer" containerID="cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0" Oct 2 19:35:36.970665 kubelet[2774]: I1002 19:35:36.970642 2774 scope.go:115] "RemoveContainer" containerID="cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0" Oct 2 19:35:36.974753 env[1634]: time="2023-10-02T19:35:36.974701214Z" level=info msg="RemoveContainer for \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\"" Oct 2 19:35:36.976085 env[1634]: time="2023-10-02T19:35:36.975957652Z" level=info msg="RemoveContainer for \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\"" Oct 2 19:35:36.976220 env[1634]: time="2023-10-02T19:35:36.976116310Z" level=error msg="RemoveContainer for \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\" failed" error="failed to set removing state for container \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\": container is already in removing state" Oct 2 19:35:36.976339 kubelet[2774]: E1002 19:35:36.976314 2774 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\": container is already in removing state" containerID="cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0" Oct 2 19:35:36.976416 kubelet[2774]: E1002 19:35:36.976407 2774 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0": container is already in removing state; Skipping pod "cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)" Oct 2 19:35:36.976893 kubelet[2774]: E1002 19:35:36.976866 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:35:36.981101 env[1634]: time="2023-10-02T19:35:36.981060217Z" level=info msg="RemoveContainer for \"cb9d9155eae2605f578ff5e626d5adc7478e790176034418485ede24143202a0\" returns successfully" Oct 2 19:35:37.263487 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66-rootfs.mount: Deactivated successfully. Oct 2 19:35:39.534486 kubelet[2774]: W1002 19:35:39.534398 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice/cri-containerd-633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66.scope WatchSource:0}: task 633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66 not found: not found Oct 2 19:35:41.356718 kubelet[2774]: E1002 19:35:41.356689 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:42.337689 systemd[1]: Started sshd@25-172.31.28.204:22-139.178.89.65:38312.service. Oct 2 19:35:42.344382 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:35:42.344773 kernel: audit: type=1130 audit(1696275342.338:1341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.204:22-139.178.89.65:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:42.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.204:22-139.178.89.65:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:42.516000 audit[3652]: USER_ACCT pid=3652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.530484 sshd[3652]: Accepted publickey for core from 139.178.89.65 port 38312 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:35:42.531143 kernel: audit: type=1101 audit(1696275342.516:1342): pid=3652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.530000 audit[3652]: CRED_ACQ pid=3652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.532171 sshd[3652]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:42.541625 systemd[1]: Started session-26.scope. Oct 2 19:35:42.546387 kernel: audit: type=1103 audit(1696275342.530:1343): pid=3652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.546696 kernel: audit: type=1006 audit(1696275342.530:1344): pid=3652 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:35:42.547060 kernel: audit: type=1300 audit(1696275342.530:1344): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d4e4660 a2=3 a3=0 items=0 ppid=1 pid=3652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.530000 audit[3652]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5d4e4660 a2=3 a3=0 items=0 ppid=1 pid=3652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:42.547328 systemd-logind[1625]: New session 26 of user core. Oct 2 19:35:42.530000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:42.558919 kernel: audit: type=1327 audit(1696275342.530:1344): proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:42.558000 audit[3652]: USER_START pid=3652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.565000 audit[3654]: CRED_ACQ pid=3654 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.591079 kernel: audit: type=1105 audit(1696275342.558:1345): pid=3652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.591617 kernel: audit: type=1103 audit(1696275342.565:1346): pid=3654 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.799641 sshd[3652]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:42.804000 audit[3652]: USER_END pid=3652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.804000 audit[3652]: CRED_DISP pid=3652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.816271 systemd[1]: sshd@25-172.31.28.204:22-139.178.89.65:38312.service: Deactivated successfully. Oct 2 19:35:42.817398 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:35:42.819489 systemd-logind[1625]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:35:42.821578 kernel: audit: type=1106 audit(1696275342.804:1347): pid=3652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.821652 kernel: audit: type=1104 audit(1696275342.804:1348): pid=3652 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:42.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.204:22-139.178.89.65:38312 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:42.821007 systemd-logind[1625]: Removed session 26. Oct 2 19:35:43.665000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:43.665000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:43.665000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001804f30 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:43.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:43.665000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c0007beb20 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:43.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:46.358585 kubelet[2774]: E1002 19:35:46.358509 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:46.839000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:46.839000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:46.839000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00f3741e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:35:46.839000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:35:46.839000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c002263020 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:35:46.839000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:35:46.840000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:46.840000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f374210 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:35:46.840000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:35:46.847000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:46.847000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f374240 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:35:46.847000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:35:46.967000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:46.967000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:46.967000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00222ed60 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:35:46.967000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:35:46.967000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c00f238ea0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:35:46.967000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:35:50.248768 kubelet[2774]: E1002 19:35:50.248738 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:35:51.360749 kubelet[2774]: E1002 19:35:51.360708 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:35:51.558470 amazon-ssm-agent[1613]: 2023-10-02 19:35:51 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:35:51.664375 amazon-ssm-agent[1613]: 2023-10-02 19:35:51 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-011b0ff1814566240 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-011b0ff1814566240 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:35:51.664375 amazon-ssm-agent[1613]: status code: 400, request id: 07c167dd-3373-473f-bcc8-df3e5632f086 Oct 2 19:35:51.692936 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:35:51.693102 kernel: audit: type=1400 audit(1696275351.690:1359): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.690000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.690000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.704274 kernel: audit: type=1400 audit(1696275351.690:1358): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.690000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011e5320 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:51.711473 kernel: audit: type=1300 audit(1696275351.690:1358): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011e5320 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:51.711622 kernel: audit: type=1327 audit(1696275351.690:1358): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:51.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:51.691000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.717751 kernel: audit: type=1400 audit(1696275351.691:1360): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.691000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011e5c40 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:51.730486 kernel: audit: type=1300 audit(1696275351.691:1360): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011e5c40 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:51.730673 kernel: audit: type=1327 audit(1696275351.691:1360): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:51.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:51.690000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001799820 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:51.743881 kernel: audit: type=1300 audit(1696275351.690:1359): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c001799820 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:51.744017 kernel: audit: type=1327 audit(1696275351.690:1359): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:51.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:51.699000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.755363 kernel: audit: type=1400 audit(1696275351.699:1361): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:35:51.699000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001799860 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:35:51.699000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:35:52.843104 systemd[1]: Started sshd@26-172.31.28.204:22-139.178.89.65:36754.service. Oct 2 19:35:52.843000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.204:22-139.178.89.65:36754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.050000 audit[3668]: USER_ACCT pid=3668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:53.052095 sshd[3668]: Accepted publickey for core from 139.178.89.65 port 36754 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:35:53.053000 audit[3668]: CRED_ACQ pid=3668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:53.053000 audit[3668]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4e30a940 a2=3 a3=0 items=0 ppid=1 pid=3668 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:35:53.053000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:35:53.056716 sshd[3668]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:35:53.071063 systemd[1]: Started session-27.scope. Oct 2 19:35:53.072403 systemd-logind[1625]: New session 27 of user core. Oct 2 19:35:53.084000 audit[3668]: USER_START pid=3668 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:53.088000 audit[3672]: CRED_ACQ pid=3672 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:53.332501 sshd[3668]: pam_unix(sshd:session): session closed for user core Oct 2 19:35:53.335000 audit[3668]: USER_END pid=3668 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:53.336000 audit[3668]: CRED_DISP pid=3668 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:35:53.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.204:22-139.178.89.65:36754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:35:53.339409 systemd-logind[1625]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:35:53.339580 systemd[1]: sshd@26-172.31.28.204:22-139.178.89.65:36754.service: Deactivated successfully. Oct 2 19:35:53.340591 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:35:53.342002 systemd-logind[1625]: Removed session 27. Oct 2 19:35:56.362479 kubelet[2774]: E1002 19:35:56.362443 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:01.364589 kubelet[2774]: E1002 19:36:01.364551 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:03.249383 kubelet[2774]: E1002 19:36:03.249349 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-84v79_kube-system(919865fc-c86e-4132-b753-09944182232d)\"" pod="kube-system/cilium-84v79" podUID=919865fc-c86e-4132-b753-09944182232d Oct 2 19:36:03.372888 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:36:03.373258 kernel: audit: type=1130 audit(1696275363.361:1371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.28.204:22-139.178.89.65:55254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:03.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.28.204:22-139.178.89.65:55254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:03.362343 systemd[1]: Started sshd@27-172.31.28.204:22-139.178.89.65:55254.service. Oct 2 19:36:03.540000 audit[3682]: USER_ACCT pid=3682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.541904 sshd[3682]: Accepted publickey for core from 139.178.89.65 port 55254 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:36:03.553750 kernel: audit: type=1101 audit(1696275363.540:1372): pid=3682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.558000 audit[3682]: CRED_ACQ pid=3682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.559659 sshd[3682]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:03.604756 kernel: audit: type=1103 audit(1696275363.558:1373): pid=3682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.605524 kernel: audit: type=1006 audit(1696275363.558:1374): pid=3682 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:36:03.605584 kernel: audit: type=1300 audit(1696275363.558:1374): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec37ba1d0 a2=3 a3=0 items=0 ppid=1 pid=3682 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:03.558000 audit[3682]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec37ba1d0 a2=3 a3=0 items=0 ppid=1 pid=3682 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:03.600916 systemd[1]: Started session-28.scope. Oct 2 19:36:03.610361 systemd-logind[1625]: New session 28 of user core. Oct 2 19:36:03.558000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:03.622952 kernel: audit: type=1327 audit(1696275363.558:1374): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:03.625000 audit[3682]: USER_START pid=3682 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.648360 kernel: audit: type=1105 audit(1696275363.625:1375): pid=3682 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.648511 kernel: audit: type=1103 audit(1696275363.637:1376): pid=3684 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.637000 audit[3684]: CRED_ACQ pid=3684 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.898889 sshd[3682]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:03.906000 audit[3682]: USER_END pid=3682 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.906000 audit[3682]: CRED_DISP pid=3682 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.931069 kernel: audit: type=1106 audit(1696275363.906:1377): pid=3682 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.931167 kernel: audit: type=1104 audit(1696275363.906:1378): pid=3682 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:03.934972 systemd[1]: Started sshd@28-172.31.28.204:22-139.178.89.65:55258.service. Oct 2 19:36:03.937634 systemd[1]: sshd@27-172.31.28.204:22-139.178.89.65:55254.service: Deactivated successfully. Oct 2 19:36:03.939016 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:36:03.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.28.204:22-139.178.89.65:55258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:03.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.28.204:22-139.178.89.65:55254 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:03.940952 systemd-logind[1625]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:36:03.942592 systemd-logind[1625]: Removed session 28. Oct 2 19:36:04.118000 audit[3693]: USER_ACCT pid=3693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:04.119427 sshd[3693]: Accepted publickey for core from 139.178.89.65 port 55258 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:36:04.120000 audit[3693]: CRED_ACQ pid=3693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:04.120000 audit[3693]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec0fff7c0 a2=3 a3=0 items=0 ppid=1 pid=3693 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:04.120000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:04.121619 sshd[3693]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:04.137905 systemd-logind[1625]: New session 29 of user core. Oct 2 19:36:04.138509 systemd[1]: Started session-29.scope. Oct 2 19:36:04.158000 audit[3693]: USER_START pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:04.162000 audit[3697]: CRED_ACQ pid=3697 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:05.298641 env[1634]: time="2023-10-02T19:36:05.298532277Z" level=info msg="StopPodSandbox for \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\"" Oct 2 19:36:05.299136 env[1634]: time="2023-10-02T19:36:05.298687083Z" level=info msg="Container to stop \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:36:05.303054 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d-shm.mount: Deactivated successfully. Oct 2 19:36:05.322033 systemd[1]: cri-containerd-dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d.scope: Deactivated successfully. Oct 2 19:36:05.321000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:36:05.325000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:36:05.373244 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d-rootfs.mount: Deactivated successfully. Oct 2 19:36:05.385574 env[1634]: time="2023-10-02T19:36:05.385520014Z" level=info msg="shim disconnected" id=dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d Oct 2 19:36:05.385893 env[1634]: time="2023-10-02T19:36:05.385866623Z" level=warning msg="cleaning up after shim disconnected" id=dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d namespace=k8s.io Oct 2 19:36:05.385970 env[1634]: time="2023-10-02T19:36:05.385901252Z" level=info msg="cleaning up dead shim" Oct 2 19:36:05.399201 env[1634]: time="2023-10-02T19:36:05.399145875Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3721 runtime=io.containerd.runc.v2\n" Oct 2 19:36:05.399574 env[1634]: time="2023-10-02T19:36:05.399541734Z" level=info msg="TearDown network for sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" successfully" Oct 2 19:36:05.399574 env[1634]: time="2023-10-02T19:36:05.399568899Z" level=info msg="StopPodSandbox for \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" returns successfully" Oct 2 19:36:05.543778 kubelet[2774]: I1002 19:36:05.543670 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-run\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.543792 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-hostproc\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.543826 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cni-path\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.543854 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-net\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544040 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-lib-modules\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544075 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-etc-cni-netd\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544273 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-hubble-tls\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544305 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-cgroup\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544331 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-bpf-maps\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544365 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/919865fc-c86e-4132-b753-09944182232d-cilium-config-path\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544404 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f2wp9\" (UniqueName: \"kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-kube-api-access-f2wp9\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544439 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/919865fc-c86e-4132-b753-09944182232d-clustermesh-secrets\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544465 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-kernel\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544489 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-xtables-lock\") pod \"919865fc-c86e-4132-b753-09944182232d\" (UID: \"919865fc-c86e-4132-b753-09944182232d\") " Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544555 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.544606 kubelet[2774]: I1002 19:36:05.544597 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.545518 kubelet[2774]: I1002 19:36:05.544622 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-hostproc" (OuterVolumeSpecName: "hostproc") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.545518 kubelet[2774]: I1002 19:36:05.544646 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cni-path" (OuterVolumeSpecName: "cni-path") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.545518 kubelet[2774]: I1002 19:36:05.544668 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.545518 kubelet[2774]: I1002 19:36:05.544689 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.545518 kubelet[2774]: I1002 19:36:05.544713 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.545998 kubelet[2774]: W1002 19:36:05.545927 2774 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/919865fc-c86e-4132-b753-09944182232d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:36:05.547848 kubelet[2774]: I1002 19:36:05.547819 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.548021 kubelet[2774]: I1002 19:36:05.548000 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.551312 kubelet[2774]: I1002 19:36:05.549351 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:05.551312 kubelet[2774]: I1002 19:36:05.551027 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/919865fc-c86e-4132-b753-09944182232d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:36:05.556457 systemd[1]: var-lib-kubelet-pods-919865fc\x2dc86e\x2d4132\x2db753\x2d09944182232d-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:36:05.558039 kubelet[2774]: I1002 19:36:05.558007 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:05.562409 systemd[1]: var-lib-kubelet-pods-919865fc\x2dc86e\x2d4132\x2db753\x2d09944182232d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df2wp9.mount: Deactivated successfully. Oct 2 19:36:05.565683 systemd[1]: var-lib-kubelet-pods-919865fc\x2dc86e\x2d4132\x2db753\x2d09944182232d-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:36:05.566904 kubelet[2774]: I1002 19:36:05.566860 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-kube-api-access-f2wp9" (OuterVolumeSpecName: "kube-api-access-f2wp9") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "kube-api-access-f2wp9". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:05.567149 kubelet[2774]: I1002 19:36:05.567120 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/919865fc-c86e-4132-b753-09944182232d-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "919865fc-c86e-4132-b753-09944182232d" (UID: "919865fc-c86e-4132-b753-09944182232d"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:36:05.645309 kubelet[2774]: I1002 19:36:05.645268 2774 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/919865fc-c86e-4132-b753-09944182232d-clustermesh-secrets\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645349 2774 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-kernel\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645396 2774 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-xtables-lock\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645412 2774 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-run\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645424 2774 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-hostproc\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645437 2774 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cni-path\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645451 2774 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-host-proc-sys-net\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645475 2774 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-lib-modules\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645487 2774 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-etc-cni-netd\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645500 2774 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-hubble-tls\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645509 kubelet[2774]: I1002 19:36:05.645514 2774 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-cilium-cgroup\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645873 kubelet[2774]: I1002 19:36:05.645531 2774 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/919865fc-c86e-4132-b753-09944182232d-cilium-config-path\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645873 kubelet[2774]: I1002 19:36:05.645547 2774 reconciler.go:399] "Volume detached for volume \"kube-api-access-f2wp9\" (UniqueName: \"kubernetes.io/projected/919865fc-c86e-4132-b753-09944182232d-kube-api-access-f2wp9\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:05.645873 kubelet[2774]: I1002 19:36:05.645562 2774 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/919865fc-c86e-4132-b753-09944182232d-bpf-maps\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:06.044062 kubelet[2774]: I1002 19:36:06.044033 2774 scope.go:115] "RemoveContainer" containerID="633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66" Oct 2 19:36:06.046240 env[1634]: time="2023-10-02T19:36:06.046086700Z" level=info msg="RemoveContainer for \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\"" Oct 2 19:36:06.051599 env[1634]: time="2023-10-02T19:36:06.051436482Z" level=info msg="RemoveContainer for \"633074b913649657b2f759f7b93a74cde215cc33ccef11863f005022112e0f66\" returns successfully" Oct 2 19:36:06.060352 systemd[1]: Removed slice kubepods-burstable-pod919865fc_c86e_4132_b753_09944182232d.slice. Oct 2 19:36:06.109186 kubelet[2774]: I1002 19:36:06.109154 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:36:06.109451 kubelet[2774]: E1002 19:36:06.109434 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.109705 kubelet[2774]: E1002 19:36:06.109691 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.109822 kubelet[2774]: E1002 19:36:06.109810 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.109933 kubelet[2774]: E1002 19:36:06.109923 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110076 kubelet[2774]: I1002 19:36:06.110065 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110165 kubelet[2774]: I1002 19:36:06.110156 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110250 kubelet[2774]: I1002 19:36:06.110242 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110339 kubelet[2774]: I1002 19:36:06.110331 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110464 kubelet[2774]: E1002 19:36:06.110453 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110564 kubelet[2774]: E1002 19:36:06.110555 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110687 kubelet[2774]: I1002 19:36:06.110677 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.110965 kubelet[2774]: I1002 19:36:06.110837 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="919865fc-c86e-4132-b753-09944182232d" containerName="mount-cgroup" Oct 2 19:36:06.126333 systemd[1]: Created slice kubepods-burstable-pod87d77ab6_3886_4b31_aeb2_72171846de1e.slice. Oct 2 19:36:06.149280 kubelet[2774]: I1002 19:36:06.149245 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-bpf-maps\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.149560 kubelet[2774]: I1002 19:36:06.149535 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-cgroup\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.149869 kubelet[2774]: I1002 19:36:06.149852 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-etc-cni-netd\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.150027 kubelet[2774]: I1002 19:36:06.150015 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-xtables-lock\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.150245 kubelet[2774]: I1002 19:36:06.150233 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-config-path\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.150353 kubelet[2774]: I1002 19:36:06.150334 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-kernel\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.150527 kubelet[2774]: I1002 19:36:06.150515 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-hubble-tls\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.150670 kubelet[2774]: I1002 19:36:06.150659 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-run\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.150845 kubelet[2774]: I1002 19:36:06.150818 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/87d77ab6-3886-4b31-aeb2-72171846de1e-clustermesh-secrets\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.151010 kubelet[2774]: I1002 19:36:06.150998 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-hostproc\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.151165 kubelet[2774]: I1002 19:36:06.151145 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-lib-modules\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.151332 kubelet[2774]: I1002 19:36:06.151320 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-net\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.151597 kubelet[2774]: I1002 19:36:06.151586 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cni-path\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.151828 kubelet[2774]: I1002 19:36:06.151779 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dmfzz\" (UniqueName: \"kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz\") pod \"cilium-lvl5w\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " pod="kube-system/cilium-lvl5w" Oct 2 19:36:06.269620 kubelet[2774]: E1002 19:36:06.269590 2774 projected.go:196] Error preparing data for projected volume kube-api-access-dmfzz for pod kube-system/cilium-lvl5w: failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:06.269975 kubelet[2774]: E1002 19:36:06.269957 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz podName:87d77ab6-3886-4b31-aeb2-72171846de1e nodeName:}" failed. No retries permitted until 2023-10-02 19:36:06.769930409 +0000 UTC m=+256.089697852 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-dmfzz" (UniqueName: "kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz") pod "cilium-lvl5w" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:06.366283 kubelet[2774]: E1002 19:36:06.366141 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:06.682864 env[1634]: time="2023-10-02T19:36:06.682591620Z" level=info msg="StopContainer for \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\" with timeout 30 (s)" Oct 2 19:36:06.684115 env[1634]: time="2023-10-02T19:36:06.683589360Z" level=info msg="Stop container \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\" with signal terminated" Oct 2 19:36:06.703092 systemd[1]: cri-containerd-512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24.scope: Deactivated successfully. Oct 2 19:36:06.702000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:36:06.707000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:36:06.732819 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24-rootfs.mount: Deactivated successfully. Oct 2 19:36:06.842093 env[1634]: time="2023-10-02T19:36:06.842036875Z" level=info msg="shim disconnected" id=512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24 Oct 2 19:36:06.842093 env[1634]: time="2023-10-02T19:36:06.842092845Z" level=warning msg="cleaning up after shim disconnected" id=512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24 namespace=k8s.io Oct 2 19:36:06.842516 env[1634]: time="2023-10-02T19:36:06.842105004Z" level=info msg="cleaning up dead shim" Oct 2 19:36:06.853554 env[1634]: time="2023-10-02T19:36:06.853496341Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3758 runtime=io.containerd.runc.v2\n" Oct 2 19:36:06.856761 env[1634]: time="2023-10-02T19:36:06.856687174Z" level=info msg="StopContainer for \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\" returns successfully" Oct 2 19:36:06.857387 env[1634]: time="2023-10-02T19:36:06.857358398Z" level=info msg="StopPodSandbox for \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\"" Oct 2 19:36:06.862775 env[1634]: time="2023-10-02T19:36:06.857422488Z" level=info msg="Container to stop \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:36:06.861005 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d-shm.mount: Deactivated successfully. Oct 2 19:36:06.866369 kubelet[2774]: E1002 19:36:06.866289 2774 projected.go:196] Error preparing data for projected volume kube-api-access-dmfzz for pod kube-system/cilium-lvl5w: failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:06.871039 kubelet[2774]: E1002 19:36:06.866464 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz podName:87d77ab6-3886-4b31-aeb2-72171846de1e nodeName:}" failed. No retries permitted until 2023-10-02 19:36:07.866395978 +0000 UTC m=+257.186163413 (durationBeforeRetry 1s). Error: MountVolume.SetUp failed for volume "kube-api-access-dmfzz" (UniqueName: "kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz") pod "cilium-lvl5w" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:06.883000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:36:06.882258 systemd[1]: cri-containerd-8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d.scope: Deactivated successfully. Oct 2 19:36:06.888000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:36:06.921819 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d-rootfs.mount: Deactivated successfully. Oct 2 19:36:06.943982 env[1634]: time="2023-10-02T19:36:06.943827848Z" level=info msg="shim disconnected" id=8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d Oct 2 19:36:06.943982 env[1634]: time="2023-10-02T19:36:06.943892528Z" level=warning msg="cleaning up after shim disconnected" id=8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d namespace=k8s.io Oct 2 19:36:06.943982 env[1634]: time="2023-10-02T19:36:06.943905868Z" level=info msg="cleaning up dead shim" Oct 2 19:36:06.974870 env[1634]: time="2023-10-02T19:36:06.974824965Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3791 runtime=io.containerd.runc.v2\n" Oct 2 19:36:06.975569 env[1634]: time="2023-10-02T19:36:06.975529213Z" level=info msg="TearDown network for sandbox \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" successfully" Oct 2 19:36:06.975569 env[1634]: time="2023-10-02T19:36:06.975561242Z" level=info msg="StopPodSandbox for \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" returns successfully" Oct 2 19:36:07.048597 kubelet[2774]: I1002 19:36:07.047958 2774 scope.go:115] "RemoveContainer" containerID="512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24" Oct 2 19:36:07.052972 env[1634]: time="2023-10-02T19:36:07.052936254Z" level=info msg="RemoveContainer for \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\"" Oct 2 19:36:07.061748 env[1634]: time="2023-10-02T19:36:07.061529053Z" level=info msg="RemoveContainer for \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\" returns successfully" Oct 2 19:36:07.062658 kubelet[2774]: I1002 19:36:07.062350 2774 scope.go:115] "RemoveContainer" containerID="512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24" Oct 2 19:36:07.063470 env[1634]: time="2023-10-02T19:36:07.063383968Z" level=error msg="ContainerStatus for \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\": not found" Oct 2 19:36:07.066917 kubelet[2774]: I1002 19:36:07.063613 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-kv9n4\" (UniqueName: \"kubernetes.io/projected/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-kube-api-access-kv9n4\") pod \"2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43\" (UID: \"2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43\") " Oct 2 19:36:07.067041 kubelet[2774]: I1002 19:36:07.066973 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-cilium-config-path\") pod \"2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43\" (UID: \"2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43\") " Oct 2 19:36:07.067473 kubelet[2774]: W1002 19:36:07.067425 2774 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:36:07.071581 kubelet[2774]: I1002 19:36:07.071544 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43" (UID: "2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:36:07.071757 kubelet[2774]: E1002 19:36:07.071678 2774 remote_runtime.go:625] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\": not found" containerID="512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24" Oct 2 19:36:07.071757 kubelet[2774]: I1002 19:36:07.071741 2774 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24} err="failed to get container status \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\": rpc error: code = NotFound desc = an error occurred when try to find container \"512ab3b463706c231d7ab3e6c77ec20307407c2c24b0f6f084f51e916fdedd24\": not found" Oct 2 19:36:07.081944 systemd[1]: var-lib-kubelet-pods-2fd8fd3a\x2d74c4\x2d4d2e\x2dbf80\x2da10edba3ee43-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dkv9n4.mount: Deactivated successfully. Oct 2 19:36:07.083210 kubelet[2774]: I1002 19:36:07.083172 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-kube-api-access-kv9n4" (OuterVolumeSpecName: "kube-api-access-kv9n4") pod "2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43" (UID: "2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43"). InnerVolumeSpecName "kube-api-access-kv9n4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:07.168086 kubelet[2774]: I1002 19:36:07.168048 2774 reconciler.go:399] "Volume detached for volume \"kube-api-access-kv9n4\" (UniqueName: \"kubernetes.io/projected/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-kube-api-access-kv9n4\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:07.168086 kubelet[2774]: I1002 19:36:07.168091 2774 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43-cilium-config-path\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:07.254501 kubelet[2774]: I1002 19:36:07.254126 2774 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=919865fc-c86e-4132-b753-09944182232d path="/var/lib/kubelet/pods/919865fc-c86e-4132-b753-09944182232d/volumes" Oct 2 19:36:07.260479 systemd[1]: Removed slice kubepods-besteffort-pod2fd8fd3a_74c4_4d2e_bf80_a10edba3ee43.slice. Oct 2 19:36:07.876692 kubelet[2774]: E1002 19:36:07.876663 2774 projected.go:196] Error preparing data for projected volume kube-api-access-dmfzz for pod kube-system/cilium-lvl5w: failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:07.877265 kubelet[2774]: E1002 19:36:07.876745 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz podName:87d77ab6-3886-4b31-aeb2-72171846de1e nodeName:}" failed. No retries permitted until 2023-10-02 19:36:09.876714732 +0000 UTC m=+259.196482162 (durationBeforeRetry 2s). Error: MountVolume.SetUp failed for volume "kube-api-access-dmfzz" (UniqueName: "kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz") pod "cilium-lvl5w" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:08.623209 sshd[3693]: pam_unix(sshd:session): session closed for user core Oct 2 19:36:08.623000 audit[3693]: USER_END pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.626446 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 19:36:08.626555 kernel: audit: type=1106 audit(1696275368.623:1392): pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.624000 audit[3693]: CRED_DISP pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.640771 kernel: audit: type=1104 audit(1696275368.624:1393): pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.639214 systemd[1]: sshd@28-172.31.28.204:22-139.178.89.65:55258.service: Deactivated successfully. Oct 2 19:36:08.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.28.204:22-139.178.89.65:55258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:08.640177 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:36:08.652264 kernel: audit: type=1131 audit(1696275368.638:1394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.28.204:22-139.178.89.65:55258 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:08.647634 systemd-logind[1625]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:36:08.658764 systemd[1]: Started sshd@29-172.31.28.204:22-139.178.89.65:33028.service. Oct 2 19:36:08.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.204:22-139.178.89.65:33028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:08.664566 systemd-logind[1625]: Removed session 29. Oct 2 19:36:08.671414 kernel: audit: type=1130 audit(1696275368.659:1395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.204:22-139.178.89.65:33028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:36:08.856000 audit[3808]: USER_ACCT pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.857781 sshd[3808]: Accepted publickey for core from 139.178.89.65 port 33028 ssh2: RSA SHA256:3SUoTCyUzcWgmGRSvO30phAsJbW/q0F+muoiwscTNp4 Oct 2 19:36:08.867764 kernel: audit: type=1101 audit(1696275368.856:1396): pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.867000 audit[3808]: CRED_ACQ pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.868351 sshd[3808]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:36:08.876877 systemd[1]: Started session-30.scope. Oct 2 19:36:08.878509 systemd-logind[1625]: New session 30 of user core. Oct 2 19:36:08.879192 kernel: audit: type=1103 audit(1696275368.867:1397): pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.879249 kernel: audit: type=1006 audit(1696275368.867:1398): pid=3808 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:36:08.867000 audit[3808]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc4da5b30 a2=3 a3=0 items=0 ppid=1 pid=3808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:08.867000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:08.893602 kernel: audit: type=1300 audit(1696275368.867:1398): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc4da5b30 a2=3 a3=0 items=0 ppid=1 pid=3808 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:08.893691 kernel: audit: type=1327 audit(1696275368.867:1398): proctitle=737368643A20636F7265205B707269765D Oct 2 19:36:08.890000 audit[3808]: USER_START pid=3808 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.893000 audit[3810]: CRED_ACQ pid=3810 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:08.900769 kernel: audit: type=1105 audit(1696275368.890:1399): pid=3808 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:36:09.255637 kubelet[2774]: I1002 19:36:09.255606 2774 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43 path="/var/lib/kubelet/pods/2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43/volumes" Oct 2 19:36:09.892777 kubelet[2774]: E1002 19:36:09.892671 2774 projected.go:196] Error preparing data for projected volume kube-api-access-dmfzz for pod kube-system/cilium-lvl5w: failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:09.893105 kubelet[2774]: E1002 19:36:09.893087 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz podName:87d77ab6-3886-4b31-aeb2-72171846de1e nodeName:}" failed. No retries permitted until 2023-10-02 19:36:13.893030539 +0000 UTC m=+263.212797978 (durationBeforeRetry 4s). Error: MountVolume.SetUp failed for volume "kube-api-access-dmfzz" (UniqueName: "kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz") pod "cilium-lvl5w" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 19:36:11.367277 kubelet[2774]: E1002 19:36:11.367244 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:14.235674 env[1634]: time="2023-10-02T19:36:14.235615244Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lvl5w,Uid:87d77ab6-3886-4b31-aeb2-72171846de1e,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:14.267954 env[1634]: time="2023-10-02T19:36:14.267863781Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:14.267954 env[1634]: time="2023-10-02T19:36:14.267909720Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:14.267954 env[1634]: time="2023-10-02T19:36:14.267925332Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:14.268556 env[1634]: time="2023-10-02T19:36:14.268492213Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c pid=3823 runtime=io.containerd.runc.v2 Oct 2 19:36:14.306955 systemd[1]: Started cri-containerd-d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c.scope. Oct 2 19:36:14.335100 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:36:14.335215 kernel: audit: type=1400 audit(1696275374.325:1401): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.335261 kernel: audit: type=1400 audit(1696275374.325:1402): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.349472 kernel: audit: type=1400 audit(1696275374.325:1403): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.349638 kernel: audit: type=1400 audit(1696275374.325:1404): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.364505 kernel: audit: type=1400 audit(1696275374.325:1405): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.365132 kernel: audit: type=1400 audit(1696275374.325:1406): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.365185 kernel: audit: type=1400 audit(1696275374.325:1407): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.374425 kernel: audit: type=1400 audit(1696275374.325:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.387344 kernel: audit: type=1400 audit(1696275374.325:1409): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.387486 kernel: audit: type=1400 audit(1696275374.333:1410): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.333000 audit: BPF prog-id=134 op=LOAD Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:14.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438613336626239333238366332643832306164616464646333306231 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:14.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438613336626239333238366332643832306164616464646333306231 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.341000 audit: BPF prog-id=135 op=LOAD Oct 2 19:36:14.341000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00018dba0 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:14.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438613336626239333238366332643832306164616464646333306231 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.354000 audit: BPF prog-id=136 op=LOAD Oct 2 19:36:14.354000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00018dbe8 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:14.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438613336626239333238366332643832306164616464646333306231 Oct 2 19:36:14.358000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:36:14.358000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:14.358000 audit: BPF prog-id=137 op=LOAD Oct 2 19:36:14.358000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00018dff8 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:14.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438613336626239333238366332643832306164616464646333306231 Oct 2 19:36:14.404639 env[1634]: time="2023-10-02T19:36:14.404546987Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lvl5w,Uid:87d77ab6-3886-4b31-aeb2-72171846de1e,Namespace:kube-system,Attempt:0,} returns sandbox id \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\"" Oct 2 19:36:14.408949 env[1634]: time="2023-10-02T19:36:14.408909460Z" level=info msg="CreateContainer within sandbox \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:36:14.503036 env[1634]: time="2023-10-02T19:36:14.502870810Z" level=info msg="CreateContainer within sandbox \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\"" Oct 2 19:36:14.506555 env[1634]: time="2023-10-02T19:36:14.503773690Z" level=info msg="StartContainer for \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\"" Oct 2 19:36:14.530994 systemd[1]: Started cri-containerd-0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f.scope. Oct 2 19:36:14.554534 systemd[1]: cri-containerd-0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f.scope: Deactivated successfully. Oct 2 19:36:14.604035 env[1634]: time="2023-10-02T19:36:14.603942215Z" level=info msg="shim disconnected" id=0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f Oct 2 19:36:14.604035 env[1634]: time="2023-10-02T19:36:14.604023663Z" level=warning msg="cleaning up after shim disconnected" id=0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f namespace=k8s.io Oct 2 19:36:14.604035 env[1634]: time="2023-10-02T19:36:14.604036830Z" level=info msg="cleaning up dead shim" Oct 2 19:36:14.631610 env[1634]: time="2023-10-02T19:36:14.631401695Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3883 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:14Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:14.632023 env[1634]: time="2023-10-02T19:36:14.631957616Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 19:36:14.636534 env[1634]: time="2023-10-02T19:36:14.636447655Z" level=error msg="Failed to pipe stderr of container \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\"" error="reading from a closed fifo" Oct 2 19:36:14.636974 env[1634]: time="2023-10-02T19:36:14.636927941Z" level=error msg="Failed to pipe stdout of container \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\"" error="reading from a closed fifo" Oct 2 19:36:14.639177 env[1634]: time="2023-10-02T19:36:14.639127197Z" level=error msg="StartContainer for \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:14.639502 kubelet[2774]: E1002 19:36:14.639478 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f" Oct 2 19:36:14.640458 kubelet[2774]: E1002 19:36:14.639774 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:14.640458 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:14.640458 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:36:14.640458 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-dmfzz,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lvl5w_kube-system(87d77ab6-3886-4b31-aeb2-72171846de1e): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:14.640458 kubelet[2774]: E1002 19:36:14.639844 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lvl5w" podUID=87d77ab6-3886-4b31-aeb2-72171846de1e Oct 2 19:36:15.078906 env[1634]: time="2023-10-02T19:36:15.078849511Z" level=info msg="StopPodSandbox for \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\"" Oct 2 19:36:15.083534 env[1634]: time="2023-10-02T19:36:15.078921266Z" level=info msg="Container to stop \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:36:15.081305 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c-shm.mount: Deactivated successfully. Oct 2 19:36:15.099000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:36:15.099583 systemd[1]: cri-containerd-d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c.scope: Deactivated successfully. Oct 2 19:36:15.103000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:36:15.131151 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c-rootfs.mount: Deactivated successfully. Oct 2 19:36:15.149713 env[1634]: time="2023-10-02T19:36:15.149606624Z" level=info msg="shim disconnected" id=d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c Oct 2 19:36:15.150087 env[1634]: time="2023-10-02T19:36:15.150053091Z" level=warning msg="cleaning up after shim disconnected" id=d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c namespace=k8s.io Oct 2 19:36:15.150087 env[1634]: time="2023-10-02T19:36:15.150080078Z" level=info msg="cleaning up dead shim" Oct 2 19:36:15.161927 env[1634]: time="2023-10-02T19:36:15.161878444Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3915 runtime=io.containerd.runc.v2\n" Oct 2 19:36:15.162320 env[1634]: time="2023-10-02T19:36:15.162285688Z" level=info msg="TearDown network for sandbox \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" successfully" Oct 2 19:36:15.162320 env[1634]: time="2023-10-02T19:36:15.162315874Z" level=info msg="StopPodSandbox for \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" returns successfully" Oct 2 19:36:15.239097 kubelet[2774]: I1002 19:36:15.239049 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-xtables-lock\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239109 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-hubble-tls\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239133 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-lib-modules\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239157 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-bpf-maps\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239179 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cni-path\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239213 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-config-path\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239241 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-run\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239265 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-cgroup\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239293 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-kernel\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239322 kubelet[2774]: I1002 19:36:15.239326 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/87d77ab6-3886-4b31-aeb2-72171846de1e-clustermesh-secrets\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239904 kubelet[2774]: I1002 19:36:15.239358 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dmfzz\" (UniqueName: \"kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239904 kubelet[2774]: I1002 19:36:15.239392 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-hostproc\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239904 kubelet[2774]: I1002 19:36:15.239421 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-net\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239904 kubelet[2774]: I1002 19:36:15.239453 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-etc-cni-netd\") pod \"87d77ab6-3886-4b31-aeb2-72171846de1e\" (UID: \"87d77ab6-3886-4b31-aeb2-72171846de1e\") " Oct 2 19:36:15.239904 kubelet[2774]: I1002 19:36:15.239518 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.239904 kubelet[2774]: I1002 19:36:15.239552 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.241817 kubelet[2774]: I1002 19:36:15.240250 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.241817 kubelet[2774]: I1002 19:36:15.240421 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.241817 kubelet[2774]: I1002 19:36:15.240416 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.241817 kubelet[2774]: I1002 19:36:15.240453 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.241817 kubelet[2774]: I1002 19:36:15.241000 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cni-path" (OuterVolumeSpecName: "cni-path") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.241817 kubelet[2774]: W1002 19:36:15.241226 2774 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/87d77ab6-3886-4b31-aeb2-72171846de1e/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:36:15.244592 kubelet[2774]: I1002 19:36:15.244553 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:36:15.244838 kubelet[2774]: I1002 19:36:15.244817 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.244970 kubelet[2774]: I1002 19:36:15.244955 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-hostproc" (OuterVolumeSpecName: "hostproc") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.245422 kubelet[2774]: I1002 19:36:15.245400 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:36:15.254205 systemd[1]: var-lib-kubelet-pods-87d77ab6\x2d3886\x2d4b31\x2daeb2\x2d72171846de1e-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:36:15.256736 kubelet[2774]: I1002 19:36:15.256619 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:15.269797 systemd[1]: var-lib-kubelet-pods-87d77ab6\x2d3886\x2d4b31\x2daeb2\x2d72171846de1e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddmfzz.mount: Deactivated successfully. Oct 2 19:36:15.275931 kubelet[2774]: I1002 19:36:15.273849 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz" (OuterVolumeSpecName: "kube-api-access-dmfzz") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "kube-api-access-dmfzz". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:36:15.276854 kubelet[2774]: I1002 19:36:15.276814 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/87d77ab6-3886-4b31-aeb2-72171846de1e-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "87d77ab6-3886-4b31-aeb2-72171846de1e" (UID: "87d77ab6-3886-4b31-aeb2-72171846de1e"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:36:15.283295 systemd[1]: Removed slice kubepods-burstable-pod87d77ab6_3886_4b31_aeb2_72171846de1e.slice. Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.339878 2774 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-cgroup\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.339959 2774 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-config-path\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.339990 2774 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cilium-run\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340006 2774 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-kernel\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340880 2774 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/87d77ab6-3886-4b31-aeb2-72171846de1e-clustermesh-secrets\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340911 2774 reconciler.go:399] "Volume detached for volume \"kube-api-access-dmfzz\" (UniqueName: \"kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-kube-api-access-dmfzz\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340926 2774 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-hostproc\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340941 2774 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-host-proc-sys-net\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340955 2774 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-etc-cni-netd\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340969 2774 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-bpf-maps\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.340984 2774 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-xtables-lock\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.341002 2774 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/87d77ab6-3886-4b31-aeb2-72171846de1e-hubble-tls\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.341017 2774 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-lib-modules\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.341244 kubelet[2774]: I1002 19:36:15.341032 2774 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/87d77ab6-3886-4b31-aeb2-72171846de1e-cni-path\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:36:15.937543 systemd[1]: var-lib-kubelet-pods-87d77ab6\x2d3886\x2d4b31\x2daeb2\x2d72171846de1e-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:36:16.080907 kubelet[2774]: I1002 19:36:16.080878 2774 scope.go:115] "RemoveContainer" containerID="0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f" Oct 2 19:36:16.084686 env[1634]: time="2023-10-02T19:36:16.084647685Z" level=info msg="RemoveContainer for \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\"" Oct 2 19:36:16.091249 env[1634]: time="2023-10-02T19:36:16.091203652Z" level=info msg="RemoveContainer for \"0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f\" returns successfully" Oct 2 19:36:16.106921 kubelet[2774]: I1002 19:36:16.106888 2774 topology_manager.go:205] "Topology Admit Handler" Oct 2 19:36:16.107179 kubelet[2774]: E1002 19:36:16.106949 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43" containerName="cilium-operator" Oct 2 19:36:16.107179 kubelet[2774]: E1002 19:36:16.107054 2774 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="87d77ab6-3886-4b31-aeb2-72171846de1e" containerName="mount-cgroup" Oct 2 19:36:16.107179 kubelet[2774]: I1002 19:36:16.107093 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="2fd8fd3a-74c4-4d2e-bf80-a10edba3ee43" containerName="cilium-operator" Oct 2 19:36:16.107179 kubelet[2774]: I1002 19:36:16.107103 2774 memory_manager.go:345] "RemoveStaleState removing state" podUID="87d77ab6-3886-4b31-aeb2-72171846de1e" containerName="mount-cgroup" Oct 2 19:36:16.117311 systemd[1]: Created slice kubepods-burstable-pod47f3ed60_537c_43f6_aeda_8f89297eb12a.slice. Oct 2 19:36:16.122232 kubelet[2774]: W1002 19:36:16.122207 2774 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.122600 kubelet[2774]: E1002 19:36:16.122585 2774 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.123025 kubelet[2774]: W1002 19:36:16.122993 2774 reflector.go:424] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.123155 kubelet[2774]: E1002 19:36:16.123143 2774 reflector.go:140] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.123315 kubelet[2774]: W1002 19:36:16.123286 2774 reflector.go:424] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.123390 kubelet[2774]: E1002 19:36:16.123325 2774 reflector.go:140] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.123390 kubelet[2774]: W1002 19:36:16.123367 2774 reflector.go:424] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.123390 kubelet[2774]: E1002 19:36:16.123381 2774 reflector.go:140] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-28-204" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-28-204' and this object Oct 2 19:36:16.146323 kubelet[2774]: I1002 19:36:16.146288 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-hostproc\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146323 kubelet[2774]: I1002 19:36:16.146345 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-hubble-tls\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146376 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z7jrm\" (UniqueName: \"kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-kube-api-access-z7jrm\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146402 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-run\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146428 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-etc-cni-netd\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146454 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-lib-modules\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146482 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-ipsec-secrets\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146507 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-kernel\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146535 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-bpf-maps\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.146576 kubelet[2774]: I1002 19:36:16.146571 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-cgroup\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.147335 kubelet[2774]: I1002 19:36:16.146606 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-xtables-lock\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.147335 kubelet[2774]: I1002 19:36:16.146768 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-clustermesh-secrets\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.147335 kubelet[2774]: I1002 19:36:16.146809 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-config-path\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.147335 kubelet[2774]: I1002 19:36:16.146850 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-net\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.147335 kubelet[2774]: I1002 19:36:16.146899 2774 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cni-path\") pod \"cilium-5l2pk\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " pod="kube-system/cilium-5l2pk" Oct 2 19:36:16.368418 kubelet[2774]: E1002 19:36:16.368390 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:17.249292 kubelet[2774]: E1002 19:36:17.249259 2774 secret.go:192] Couldn't get secret kube-system/cilium-clustermesh: failed to sync secret cache: timed out waiting for the condition Oct 2 19:36:17.250018 kubelet[2774]: E1002 19:36:17.250004 2774 configmap.go:197] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:36:17.250154 kubelet[2774]: E1002 19:36:17.250142 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-clustermesh-secrets podName:47f3ed60-537c-43f6-aeda-8f89297eb12a nodeName:}" failed. No retries permitted until 2023-10-02 19:36:17.75001178 +0000 UTC m=+267.069779225 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "clustermesh-secrets" (UniqueName: "kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-clustermesh-secrets") pod "cilium-5l2pk" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:36:17.250391 kubelet[2774]: E1002 19:36:17.250375 2774 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-config-path podName:47f3ed60-537c-43f6-aeda-8f89297eb12a nodeName:}" failed. No retries permitted until 2023-10-02 19:36:17.750338852 +0000 UTC m=+267.070106278 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-config-path") pod "cilium-5l2pk" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:36:17.252356 kubelet[2774]: I1002 19:36:17.251803 2774 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=87d77ab6-3886-4b31-aeb2-72171846de1e path="/var/lib/kubelet/pods/87d77ab6-3886-4b31-aeb2-72171846de1e/volumes" Oct 2 19:36:17.711155 kubelet[2774]: W1002 19:36:17.711013 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod87d77ab6_3886_4b31_aeb2_72171846de1e.slice/cri-containerd-0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f.scope WatchSource:0}: container "0c25b94c61827ca226ce9d7908fe76ee464c82f2d190b2f42392ae958310a92f" in namespace "k8s.io": not found Oct 2 19:36:17.931993 env[1634]: time="2023-10-02T19:36:17.930405745Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-5l2pk,Uid:47f3ed60-537c-43f6-aeda-8f89297eb12a,Namespace:kube-system,Attempt:0,}" Oct 2 19:36:17.953885 env[1634]: time="2023-10-02T19:36:17.953676952Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:36:17.954100 env[1634]: time="2023-10-02T19:36:17.953847227Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:36:17.954100 env[1634]: time="2023-10-02T19:36:17.953879193Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:36:17.954100 env[1634]: time="2023-10-02T19:36:17.954031187Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87 pid=3943 runtime=io.containerd.runc.v2 Oct 2 19:36:17.986140 systemd[1]: Started cri-containerd-7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87.scope. Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.026000 audit: BPF prog-id=138 op=LOAD Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3943 pid=3952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761636637356465613537303362336232306363616661396438386533 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3943 pid=3952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761636637356465613537303362336232306363616661396438386533 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit: BPF prog-id=139 op=LOAD Oct 2 19:36:18.027000 audit[3952]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00020aea0 items=0 ppid=3943 pid=3952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761636637356465613537303362336232306363616661396438386533 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit: BPF prog-id=140 op=LOAD Oct 2 19:36:18.027000 audit[3952]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00020aee8 items=0 ppid=3943 pid=3952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761636637356465613537303362336232306363616661396438386533 Oct 2 19:36:18.027000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:36:18.027000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { perfmon } for pid=3952 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit[3952]: AVC avc: denied { bpf } for pid=3952 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:36:18.027000 audit: BPF prog-id=141 op=LOAD Oct 2 19:36:18.027000 audit[3952]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00020b2f8 items=0 ppid=3943 pid=3952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:36:18.027000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761636637356465613537303362336232306363616661396438386533 Oct 2 19:36:18.049599 env[1634]: time="2023-10-02T19:36:18.049247736Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-5l2pk,Uid:47f3ed60-537c-43f6-aeda-8f89297eb12a,Namespace:kube-system,Attempt:0,} returns sandbox id \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\"" Oct 2 19:36:18.056412 env[1634]: time="2023-10-02T19:36:18.054652107Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:36:18.072150 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount364782420.mount: Deactivated successfully. Oct 2 19:36:18.156074 env[1634]: time="2023-10-02T19:36:18.156009424Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\"" Oct 2 19:36:18.157032 env[1634]: time="2023-10-02T19:36:18.156977008Z" level=info msg="StartContainer for \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\"" Oct 2 19:36:18.185831 systemd[1]: Started cri-containerd-3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e.scope. Oct 2 19:36:18.203959 systemd[1]: cri-containerd-3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e.scope: Deactivated successfully. Oct 2 19:36:18.255598 env[1634]: time="2023-10-02T19:36:18.255403648Z" level=info msg="shim disconnected" id=3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e Oct 2 19:36:18.256119 env[1634]: time="2023-10-02T19:36:18.255602440Z" level=warning msg="cleaning up after shim disconnected" id=3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e namespace=k8s.io Oct 2 19:36:18.256119 env[1634]: time="2023-10-02T19:36:18.255617159Z" level=info msg="cleaning up dead shim" Oct 2 19:36:18.271301 env[1634]: time="2023-10-02T19:36:18.271242380Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4006 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:18Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:18.271756 env[1634]: time="2023-10-02T19:36:18.271672719Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 19:36:18.273018 env[1634]: time="2023-10-02T19:36:18.272836612Z" level=error msg="Failed to pipe stdout of container \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\"" error="reading from a closed fifo" Oct 2 19:36:18.273845 env[1634]: time="2023-10-02T19:36:18.273288962Z" level=error msg="Failed to pipe stderr of container \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\"" error="reading from a closed fifo" Oct 2 19:36:18.276208 env[1634]: time="2023-10-02T19:36:18.276157870Z" level=error msg="StartContainer for \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:18.276929 kubelet[2774]: E1002 19:36:18.276890 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e" Oct 2 19:36:18.279024 kubelet[2774]: E1002 19:36:18.277660 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:18.279024 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:18.279024 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:36:18.279024 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z7jrm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:18.279024 kubelet[2774]: E1002 19:36:18.277748 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:36:19.005784 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e-rootfs.mount: Deactivated successfully. Oct 2 19:36:19.095076 env[1634]: time="2023-10-02T19:36:19.094093243Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:36:19.112877 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1017797200.mount: Deactivated successfully. Oct 2 19:36:19.123099 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1494423580.mount: Deactivated successfully. Oct 2 19:36:19.178786 env[1634]: time="2023-10-02T19:36:19.178551767Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\"" Oct 2 19:36:19.181798 env[1634]: time="2023-10-02T19:36:19.181631815Z" level=info msg="StartContainer for \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\"" Oct 2 19:36:19.214745 systemd[1]: Started cri-containerd-0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130.scope. Oct 2 19:36:19.228533 systemd[1]: cri-containerd-0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130.scope: Deactivated successfully. Oct 2 19:36:19.252094 env[1634]: time="2023-10-02T19:36:19.251995289Z" level=info msg="shim disconnected" id=0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130 Oct 2 19:36:19.252094 env[1634]: time="2023-10-02T19:36:19.252096515Z" level=warning msg="cleaning up after shim disconnected" id=0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130 namespace=k8s.io Oct 2 19:36:19.253320 env[1634]: time="2023-10-02T19:36:19.252111839Z" level=info msg="cleaning up dead shim" Oct 2 19:36:19.289091 env[1634]: time="2023-10-02T19:36:19.288225107Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4044 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:19Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:19.289091 env[1634]: time="2023-10-02T19:36:19.288565577Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 19:36:19.289973 env[1634]: time="2023-10-02T19:36:19.289887166Z" level=error msg="Failed to pipe stdout of container \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\"" error="reading from a closed fifo" Oct 2 19:36:19.290262 env[1634]: time="2023-10-02T19:36:19.290229657Z" level=error msg="Failed to pipe stderr of container \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\"" error="reading from a closed fifo" Oct 2 19:36:19.293305 env[1634]: time="2023-10-02T19:36:19.293255019Z" level=error msg="StartContainer for \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:19.293712 kubelet[2774]: E1002 19:36:19.293649 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130" Oct 2 19:36:19.294235 kubelet[2774]: E1002 19:36:19.293833 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:19.294235 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:19.294235 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:36:19.294235 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z7jrm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:19.294235 kubelet[2774]: E1002 19:36:19.293884 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:36:20.095440 kubelet[2774]: I1002 19:36:20.094572 2774 scope.go:115] "RemoveContainer" containerID="3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e" Oct 2 19:36:20.095440 kubelet[2774]: I1002 19:36:20.095408 2774 scope.go:115] "RemoveContainer" containerID="3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e" Oct 2 19:36:20.101270 env[1634]: time="2023-10-02T19:36:20.101211326Z" level=info msg="RemoveContainer for \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\"" Oct 2 19:36:20.103955 env[1634]: time="2023-10-02T19:36:20.103917030Z" level=info msg="RemoveContainer for \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\"" Oct 2 19:36:20.104559 env[1634]: time="2023-10-02T19:36:20.104519168Z" level=error msg="RemoveContainer for \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\" failed" error="failed to set removing state for container \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\": container is already in removing state" Oct 2 19:36:20.105492 kubelet[2774]: E1002 19:36:20.105225 2774 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\": container is already in removing state" containerID="3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e" Oct 2 19:36:20.105492 kubelet[2774]: E1002 19:36:20.105267 2774 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e": container is already in removing state; Skipping pod "cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a)" Oct 2 19:36:20.106781 kubelet[2774]: E1002 19:36:20.105743 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a)\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:36:20.115749 env[1634]: time="2023-10-02T19:36:20.109250815Z" level=info msg="RemoveContainer for \"3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e\" returns successfully" Oct 2 19:36:21.099357 kubelet[2774]: E1002 19:36:21.099317 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a)\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:36:21.362555 kubelet[2774]: W1002 19:36:21.362273 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod47f3ed60_537c_43f6_aeda_8f89297eb12a.slice/cri-containerd-3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e.scope WatchSource:0}: container "3fb6f0ba4e9b2651fde60853872e0281a3be88609d9ca21e504315af95d6232e" in namespace "k8s.io": not found Oct 2 19:36:21.370103 kubelet[2774]: E1002 19:36:21.370064 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:24.480369 kubelet[2774]: W1002 19:36:24.479946 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod47f3ed60_537c_43f6_aeda_8f89297eb12a.slice/cri-containerd-0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130.scope WatchSource:0}: task 0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130 not found: not found Oct 2 19:36:26.371608 kubelet[2774]: E1002 19:36:26.371574 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:31.373035 kubelet[2774]: E1002 19:36:31.372881 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:33.252099 env[1634]: time="2023-10-02T19:36:33.251845783Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:36:33.271983 env[1634]: time="2023-10-02T19:36:33.271925376Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\"" Oct 2 19:36:33.272814 env[1634]: time="2023-10-02T19:36:33.272774368Z" level=info msg="StartContainer for \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\"" Oct 2 19:36:33.314418 systemd[1]: Started cri-containerd-9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20.scope. Oct 2 19:36:33.341341 systemd[1]: cri-containerd-9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20.scope: Deactivated successfully. Oct 2 19:36:33.349045 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20-rootfs.mount: Deactivated successfully. Oct 2 19:36:33.460539 env[1634]: time="2023-10-02T19:36:33.460476540Z" level=info msg="shim disconnected" id=9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20 Oct 2 19:36:33.460539 env[1634]: time="2023-10-02T19:36:33.460537743Z" level=warning msg="cleaning up after shim disconnected" id=9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20 namespace=k8s.io Oct 2 19:36:33.460947 env[1634]: time="2023-10-02T19:36:33.460551650Z" level=info msg="cleaning up dead shim" Oct 2 19:36:33.473355 env[1634]: time="2023-10-02T19:36:33.473295240Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:36:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4080 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:36:33Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:36:33.473661 env[1634]: time="2023-10-02T19:36:33.473596810Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 19:36:33.474928 env[1634]: time="2023-10-02T19:36:33.474872592Z" level=error msg="Failed to pipe stderr of container \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\"" error="reading from a closed fifo" Oct 2 19:36:33.476840 env[1634]: time="2023-10-02T19:36:33.476790435Z" level=error msg="Failed to pipe stdout of container \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\"" error="reading from a closed fifo" Oct 2 19:36:33.479237 env[1634]: time="2023-10-02T19:36:33.479191258Z" level=error msg="StartContainer for \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:36:33.479495 kubelet[2774]: E1002 19:36:33.479474 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20" Oct 2 19:36:33.479985 kubelet[2774]: E1002 19:36:33.479598 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:36:33.479985 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:36:33.479985 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:36:33.479985 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z7jrm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:36:33.479985 kubelet[2774]: E1002 19:36:33.479648 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:36:34.125152 kubelet[2774]: I1002 19:36:34.125044 2774 scope.go:115] "RemoveContainer" containerID="0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130" Oct 2 19:36:34.125405 kubelet[2774]: I1002 19:36:34.125374 2774 scope.go:115] "RemoveContainer" containerID="0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130" Oct 2 19:36:34.131277 env[1634]: time="2023-10-02T19:36:34.128182849Z" level=info msg="RemoveContainer for \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\"" Oct 2 19:36:34.131277 env[1634]: time="2023-10-02T19:36:34.128544446Z" level=info msg="RemoveContainer for \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\"" Oct 2 19:36:34.133012 env[1634]: time="2023-10-02T19:36:34.131790864Z" level=error msg="RemoveContainer for \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\" failed" error="failed to set removing state for container \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\": container is already in removing state" Oct 2 19:36:34.135166 kubelet[2774]: E1002 19:36:34.133387 2774 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\": container is already in removing state" containerID="0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130" Oct 2 19:36:34.135166 kubelet[2774]: I1002 19:36:34.133871 2774 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130} err="rpc error: code = Unknown desc = failed to set removing state for container \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\": container is already in removing state" Oct 2 19:36:34.145381 env[1634]: time="2023-10-02T19:36:34.145335702Z" level=info msg="RemoveContainer for \"0184073909c53657e78ef275308a6ec9b138a3fdbe2e7193ff29a605874c1130\" returns successfully" Oct 2 19:36:34.150837 kubelet[2774]: E1002 19:36:34.148022 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a)\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:36:36.373933 kubelet[2774]: E1002 19:36:36.373905 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:36.584309 kubelet[2774]: W1002 19:36:36.584271 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod47f3ed60_537c_43f6_aeda_8f89297eb12a.slice/cri-containerd-9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20.scope WatchSource:0}: task 9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20 not found: not found Oct 2 19:36:41.376090 kubelet[2774]: E1002 19:36:41.376045 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:43.665000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:43.668154 kernel: kauditd_printk_skb: 106 callbacks suppressed Oct 2 19:36:43.668262 kernel: audit: type=1400 audit(1696275403.665:1439): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:43.665000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:43.691441 kernel: audit: type=1400 audit(1696275403.665:1440): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:43.691578 kernel: audit: type=1300 audit(1696275403.665:1440): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000f47920 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:43.665000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000f47920 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:43.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:43.706411 kernel: audit: type=1327 audit(1696275403.665:1440): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:43.706644 kernel: audit: type=1300 audit(1696275403.665:1439): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000f30480 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:43.665000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000f30480 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:43.665000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:43.721636 kernel: audit: type=1327 audit(1696275403.665:1439): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:46.377848 kubelet[2774]: E1002 19:36:46.377762 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:46.839000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.839000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001e67e00 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:36:46.866760 kernel: audit: type=1400 audit(1696275406.839:1441): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.866908 kernel: audit: type=1300 audit(1696275406.839:1441): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001e67e00 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:36:46.866945 kernel: audit: type=1327 audit(1696275406.839:1441): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:36:46.839000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:36:46.845000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.899395 kernel: audit: type=1400 audit(1696275406.845:1442): avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.845000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b429230 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:36:46.845000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:36:46.845000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.845000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b2ff050 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:36:46.845000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:36:46.847000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.847000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b2ff0e0 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:36:46.847000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:36:46.968000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.968000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b2ff110 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:36:46.968000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:36:46.971000 audit[2651]: AVC avc: denied { watch } for pid=2651 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:46.971000 audit[2651]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c001e48e80 a2=fc6 a3=0 items=0 ppid=2493 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c45,c439 key=(null) Oct 2 19:36:46.971000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E323034002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:36:48.248716 kubelet[2774]: E1002 19:36:48.248674 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a)\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:36:50.951691 env[1634]: time="2023-10-02T19:36:50.951646990Z" level=info msg="StopPodSandbox for \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\"" Oct 2 19:36:50.952207 env[1634]: time="2023-10-02T19:36:50.951841792Z" level=info msg="TearDown network for sandbox \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" successfully" Oct 2 19:36:50.952207 env[1634]: time="2023-10-02T19:36:50.951899454Z" level=info msg="StopPodSandbox for \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" returns successfully" Oct 2 19:36:50.953061 env[1634]: time="2023-10-02T19:36:50.953019833Z" level=info msg="RemovePodSandbox for \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\"" Oct 2 19:36:50.953404 env[1634]: time="2023-10-02T19:36:50.953056126Z" level=info msg="Forcibly stopping sandbox \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\"" Oct 2 19:36:50.953926 env[1634]: time="2023-10-02T19:36:50.953401637Z" level=info msg="TearDown network for sandbox \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" successfully" Oct 2 19:36:50.958188 env[1634]: time="2023-10-02T19:36:50.958123813Z" level=info msg="RemovePodSandbox \"8fcb649706e95f358623655028fb2017030b268da35bbf3f0c69c9293dedc20d\" returns successfully" Oct 2 19:36:50.959035 env[1634]: time="2023-10-02T19:36:50.959000409Z" level=info msg="StopPodSandbox for \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\"" Oct 2 19:36:50.959158 env[1634]: time="2023-10-02T19:36:50.959104691Z" level=info msg="TearDown network for sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" successfully" Oct 2 19:36:50.959158 env[1634]: time="2023-10-02T19:36:50.959149688Z" level=info msg="StopPodSandbox for \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" returns successfully" Oct 2 19:36:50.959709 env[1634]: time="2023-10-02T19:36:50.959670085Z" level=info msg="RemovePodSandbox for \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\"" Oct 2 19:36:50.961880 env[1634]: time="2023-10-02T19:36:50.959701294Z" level=info msg="Forcibly stopping sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\"" Oct 2 19:36:50.961880 env[1634]: time="2023-10-02T19:36:50.961748378Z" level=info msg="TearDown network for sandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" successfully" Oct 2 19:36:50.981085 env[1634]: time="2023-10-02T19:36:50.981015516Z" level=info msg="RemovePodSandbox \"dc0261bf5ad58c6bb3e6767d563d237ec7b0a51d8fb49b48d72ca1948c02ea7d\" returns successfully" Oct 2 19:36:50.981641 env[1634]: time="2023-10-02T19:36:50.981606749Z" level=info msg="StopPodSandbox for \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\"" Oct 2 19:36:50.981900 env[1634]: time="2023-10-02T19:36:50.981701711Z" level=info msg="TearDown network for sandbox \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" successfully" Oct 2 19:36:50.981900 env[1634]: time="2023-10-02T19:36:50.981873010Z" level=info msg="StopPodSandbox for \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" returns successfully" Oct 2 19:36:50.982373 env[1634]: time="2023-10-02T19:36:50.982280554Z" level=info msg="RemovePodSandbox for \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\"" Oct 2 19:36:50.982373 env[1634]: time="2023-10-02T19:36:50.982314918Z" level=info msg="Forcibly stopping sandbox \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\"" Oct 2 19:36:50.983056 env[1634]: time="2023-10-02T19:36:50.982477200Z" level=info msg="TearDown network for sandbox \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" successfully" Oct 2 19:36:50.992249 env[1634]: time="2023-10-02T19:36:50.992186218Z" level=info msg="RemovePodSandbox \"d8a36bb93286c2d820adadddc30b151e46adf0a8cf458703a713a206e54dec4c\" returns successfully" Oct 2 19:36:51.379297 kubelet[2774]: E1002 19:36:51.379263 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:36:51.691000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.693487 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:36:51.693590 kernel: audit: type=1400 audit(1696275411.691:1447): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.692000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.705167 kernel: audit: type=1400 audit(1696275411.692:1448): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.692000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c000f03a60 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:51.714114 kernel: audit: type=1300 audit(1696275411.692:1448): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c000f03a60 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:51.714253 kernel: audit: type=1327 audit(1696275411.692:1448): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:51.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:51.728146 kernel: audit: type=1300 audit(1696275411.691:1447): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0013ddd20 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:51.691000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0013ddd20 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:51.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:51.734611 kernel: audit: type=1327 audit(1696275411.691:1447): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:51.734741 kernel: audit: type=1400 audit(1696275411.695:1449): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.695000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.695000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0013ddd60 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:51.750291 kernel: audit: type=1300 audit(1696275411.695:1449): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c0013ddd60 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:51.750439 kernel: audit: type=1327 audit(1696275411.695:1449): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:51.695000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:51.700000 audit[2616]: AVC avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.762022 kernel: audit: type=1400 audit(1696275411.700:1450): avc: denied { watch } for pid=2616 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:36:51.700000 audit[2616]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0013ddea0 a2=fc6 a3=0 items=0 ppid=2476 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:36:51.700000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:36:56.380263 kubelet[2774]: E1002 19:36:56.380229 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:00.253343 env[1634]: time="2023-10-02T19:37:00.253299853Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:37:00.277933 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1020712914.mount: Deactivated successfully. Oct 2 19:37:00.287010 env[1634]: time="2023-10-02T19:37:00.286893174Z" level=info msg="CreateContainer within sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\"" Oct 2 19:37:00.288098 env[1634]: time="2023-10-02T19:37:00.288051322Z" level=info msg="StartContainer for \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\"" Oct 2 19:37:00.321541 systemd[1]: run-containerd-runc-k8s.io-2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8-runc.5U60kx.mount: Deactivated successfully. Oct 2 19:37:00.327531 systemd[1]: Started cri-containerd-2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8.scope. Oct 2 19:37:00.341025 systemd[1]: cri-containerd-2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8.scope: Deactivated successfully. Oct 2 19:37:00.455854 env[1634]: time="2023-10-02T19:37:00.455785200Z" level=info msg="shim disconnected" id=2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8 Oct 2 19:37:00.455854 env[1634]: time="2023-10-02T19:37:00.455853267Z" level=warning msg="cleaning up after shim disconnected" id=2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8 namespace=k8s.io Oct 2 19:37:00.456199 env[1634]: time="2023-10-02T19:37:00.455865068Z" level=info msg="cleaning up dead shim" Oct 2 19:37:00.465468 env[1634]: time="2023-10-02T19:37:00.465410565Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4122 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:37:00.465798 env[1634]: time="2023-10-02T19:37:00.465714409Z" level=error msg="copy shim log" error="read /proc/self/fd/42: file already closed" Oct 2 19:37:00.466845 env[1634]: time="2023-10-02T19:37:00.466792689Z" level=error msg="Failed to pipe stderr of container \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\"" error="reading from a closed fifo" Oct 2 19:37:00.468058 env[1634]: time="2023-10-02T19:37:00.468008443Z" level=error msg="Failed to pipe stdout of container \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\"" error="reading from a closed fifo" Oct 2 19:37:00.471254 env[1634]: time="2023-10-02T19:37:00.471198093Z" level=error msg="StartContainer for \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:37:00.472194 kubelet[2774]: E1002 19:37:00.472118 2774 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8" Oct 2 19:37:00.472788 kubelet[2774]: E1002 19:37:00.472467 2774 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:37:00.472788 kubelet[2774]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:37:00.472788 kubelet[2774]: rm /hostbin/cilium-mount Oct 2 19:37:00.472788 kubelet[2774]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-z7jrm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:37:00.472788 kubelet[2774]: E1002 19:37:00.472544 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:37:01.190827 kubelet[2774]: I1002 19:37:01.190697 2774 scope.go:115] "RemoveContainer" containerID="9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20" Oct 2 19:37:01.191065 kubelet[2774]: I1002 19:37:01.191049 2774 scope.go:115] "RemoveContainer" containerID="9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20" Oct 2 19:37:01.200628 env[1634]: time="2023-10-02T19:37:01.200575974Z" level=info msg="RemoveContainer for \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\"" Oct 2 19:37:01.208015 env[1634]: time="2023-10-02T19:37:01.207956857Z" level=info msg="RemoveContainer for \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\"" Oct 2 19:37:01.208429 env[1634]: time="2023-10-02T19:37:01.208352759Z" level=error msg="RemoveContainer for \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\" failed" error="failed to set removing state for container \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\": container is already in removing state" Oct 2 19:37:01.212225 kubelet[2774]: E1002 19:37:01.208875 2774 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\": container is already in removing state" containerID="9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20" Oct 2 19:37:01.212225 kubelet[2774]: E1002 19:37:01.208939 2774 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20": container is already in removing state; Skipping pod "cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a)" Oct 2 19:37:01.212225 kubelet[2774]: E1002 19:37:01.209401 2774 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-5l2pk_kube-system(47f3ed60-537c-43f6-aeda-8f89297eb12a)\"" pod="kube-system/cilium-5l2pk" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a Oct 2 19:37:01.228400 env[1634]: time="2023-10-02T19:37:01.228350353Z" level=info msg="RemoveContainer for \"9341dbbbe1febfcd87cd8187ee3d731c1251c0a56b7a6b4dbe0c45fde7f82e20\" returns successfully" Oct 2 19:37:01.266172 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8-rootfs.mount: Deactivated successfully. Oct 2 19:37:01.382039 kubelet[2774]: E1002 19:37:01.382005 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:03.562082 kubelet[2774]: W1002 19:37:03.562041 2774 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod47f3ed60_537c_43f6_aeda_8f89297eb12a.slice/cri-containerd-2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8.scope WatchSource:0}: task 2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8 not found: not found Oct 2 19:37:06.383482 kubelet[2774]: E1002 19:37:06.383445 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:11.385285 kubelet[2774]: E1002 19:37:11.385251 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:11.883293 env[1634]: time="2023-10-02T19:37:11.883151329Z" level=info msg="StopPodSandbox for \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\"" Oct 2 19:37:11.883897 env[1634]: time="2023-10-02T19:37:11.883325705Z" level=info msg="Container to stop \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:37:11.887857 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87-shm.mount: Deactivated successfully. Oct 2 19:37:11.907602 systemd[1]: cri-containerd-7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87.scope: Deactivated successfully. Oct 2 19:37:11.912355 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:37:11.912496 kernel: audit: type=1334 audit(1696275431.907:1451): prog-id=138 op=UNLOAD Oct 2 19:37:11.907000 audit: BPF prog-id=138 op=UNLOAD Oct 2 19:37:11.912000 audit: BPF prog-id=141 op=UNLOAD Oct 2 19:37:11.916763 kernel: audit: type=1334 audit(1696275431.912:1452): prog-id=141 op=UNLOAD Oct 2 19:37:11.975325 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87-rootfs.mount: Deactivated successfully. Oct 2 19:37:11.993350 env[1634]: time="2023-10-02T19:37:11.993294924Z" level=info msg="shim disconnected" id=7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87 Oct 2 19:37:11.993847 env[1634]: time="2023-10-02T19:37:11.993819078Z" level=warning msg="cleaning up after shim disconnected" id=7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87 namespace=k8s.io Oct 2 19:37:11.993974 env[1634]: time="2023-10-02T19:37:11.993957446Z" level=info msg="cleaning up dead shim" Oct 2 19:37:12.041578 env[1634]: time="2023-10-02T19:37:12.041475432Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4156 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:37:12Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 19:37:12.042191 env[1634]: time="2023-10-02T19:37:12.042145615Z" level=info msg="TearDown network for sandbox \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" successfully" Oct 2 19:37:12.042317 env[1634]: time="2023-10-02T19:37:12.042187612Z" level=info msg="StopPodSandbox for \"7acf75dea5703b3b20ccafa9d88e373d68574bb63f3420af86e2c24408dcde87\" returns successfully" Oct 2 19:37:12.058892 sshd[3808]: pam_unix(sshd:session): session closed for user core Oct 2 19:37:12.059000 audit[3808]: USER_END pid=3808 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:12.059000 audit[3808]: CRED_DISP pid=3808 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:12.074981 kernel: audit: type=1106 audit(1696275432.059:1453): pid=3808 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:12.075128 kernel: audit: type=1104 audit(1696275432.059:1454): pid=3808 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:37:12.076593 systemd[1]: sshd@29-172.31.28.204:22-139.178.89.65:33028.service: Deactivated successfully. Oct 2 19:37:12.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.204:22-139.178.89.65:33028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:12.077807 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:37:12.078164 systemd[1]: session-30.scope: Consumed 1.108s CPU time. Oct 2 19:37:12.079377 systemd-logind[1625]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:37:12.080666 systemd-logind[1625]: Removed session 30. Oct 2 19:37:12.085042 kernel: audit: type=1131 audit(1696275432.076:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.204:22-139.178.89.65:33028 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123570 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-z7jrm\" (UniqueName: \"kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-kube-api-access-z7jrm\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123625 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-hostproc\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123657 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-clustermesh-secrets\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123684 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-config-path\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123711 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-etc-cni-netd\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123764 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-bpf-maps\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123791 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-hubble-tls\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123815 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-lib-modules\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123846 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-kernel\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123873 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-net\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123900 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-ipsec-secrets\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123925 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-xtables-lock\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123949 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cni-path\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.123973 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-run\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.124003 2774 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-cgroup\") pod \"47f3ed60-537c-43f6-aeda-8f89297eb12a\" (UID: \"47f3ed60-537c-43f6-aeda-8f89297eb12a\") " Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.124068 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.124100 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-hostproc" (OuterVolumeSpecName: "hostproc") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.127758 kubelet[2774]: I1002 19:37:12.124274 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.127758 kubelet[2774]: W1002 19:37:12.124448 2774 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/47f3ed60-537c-43f6-aeda-8f89297eb12a/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:37:12.133963 systemd[1]: var-lib-kubelet-pods-47f3ed60\x2d537c\x2d43f6\x2daeda\x2d8f89297eb12a-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:37:12.136111 kubelet[2774]: I1002 19:37:12.134864 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.136111 kubelet[2774]: I1002 19:37:12.135119 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.136111 kubelet[2774]: I1002 19:37:12.135155 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cni-path" (OuterVolumeSpecName: "cni-path") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.136111 kubelet[2774]: I1002 19:37:12.135188 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.136111 kubelet[2774]: I1002 19:37:12.135332 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.136111 kubelet[2774]: I1002 19:37:12.135360 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.137259 kubelet[2774]: I1002 19:37:12.137229 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:37:12.137422 kubelet[2774]: I1002 19:37:12.137405 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:37:12.139241 kubelet[2774]: I1002 19:37:12.139210 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:37:12.144263 systemd[1]: var-lib-kubelet-pods-47f3ed60\x2d537c\x2d43f6\x2daeda\x2d8f89297eb12a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dz7jrm.mount: Deactivated successfully. Oct 2 19:37:12.145613 kubelet[2774]: I1002 19:37:12.145314 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-kube-api-access-z7jrm" (OuterVolumeSpecName: "kube-api-access-z7jrm") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "kube-api-access-z7jrm". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:37:12.151058 kubelet[2774]: I1002 19:37:12.149957 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:37:12.150295 systemd[1]: var-lib-kubelet-pods-47f3ed60\x2d537c\x2d43f6\x2daeda\x2d8f89297eb12a-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:37:12.152030 kubelet[2774]: I1002 19:37:12.151998 2774 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "47f3ed60-537c-43f6-aeda-8f89297eb12a" (UID: "47f3ed60-537c-43f6-aeda-8f89297eb12a"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:37:12.218058 kubelet[2774]: I1002 19:37:12.218030 2774 scope.go:115] "RemoveContainer" containerID="2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8" Oct 2 19:37:12.220751 env[1634]: time="2023-10-02T19:37:12.220241896Z" level=info msg="RemoveContainer for \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\"" Oct 2 19:37:12.224575 kubelet[2774]: I1002 19:37:12.224515 2774 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-net\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.224900 kubelet[2774]: I1002 19:37:12.224885 2774 reconciler.go:399] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-ipsec-secrets\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.225113 kubelet[2774]: I1002 19:37:12.225101 2774 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-cgroup\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.225232 kubelet[2774]: I1002 19:37:12.225222 2774 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-xtables-lock\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.226836 env[1634]: time="2023-10-02T19:37:12.226648335Z" level=info msg="RemoveContainer for \"2d4bda9f92ae0c5a3c08c8e2cfe99f382b0d4763cb53f69bdf989b9a59c8fbc8\" returns successfully" Oct 2 19:37:12.228426 systemd[1]: Removed slice kubepods-burstable-pod47f3ed60_537c_43f6_aeda_8f89297eb12a.slice. Oct 2 19:37:12.230255 kubelet[2774]: I1002 19:37:12.230236 2774 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cni-path\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.230501 kubelet[2774]: I1002 19:37:12.230478 2774 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-run\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.230846 kubelet[2774]: I1002 19:37:12.230824 2774 reconciler.go:399] "Volume detached for volume \"kube-api-access-z7jrm\" (UniqueName: \"kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-kube-api-access-z7jrm\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.230966 kubelet[2774]: I1002 19:37:12.230956 2774 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-hostproc\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.231274 kubelet[2774]: I1002 19:37:12.231257 2774 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-etc-cni-netd\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.231450 kubelet[2774]: I1002 19:37:12.231439 2774 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/47f3ed60-537c-43f6-aeda-8f89297eb12a-clustermesh-secrets\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.231617 kubelet[2774]: I1002 19:37:12.231606 2774 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/47f3ed60-537c-43f6-aeda-8f89297eb12a-cilium-config-path\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.231932 kubelet[2774]: I1002 19:37:12.231920 2774 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-host-proc-sys-kernel\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.232081 kubelet[2774]: I1002 19:37:12.232071 2774 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-bpf-maps\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.232252 kubelet[2774]: I1002 19:37:12.232243 2774 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/47f3ed60-537c-43f6-aeda-8f89297eb12a-hubble-tls\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.232379 kubelet[2774]: I1002 19:37:12.232371 2774 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/47f3ed60-537c-43f6-aeda-8f89297eb12a-lib-modules\") on node \"ip-172-31-28-204\" DevicePath \"\"" Oct 2 19:37:12.887458 systemd[1]: var-lib-kubelet-pods-47f3ed60\x2d537c\x2d43f6\x2daeda\x2d8f89297eb12a-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:37:13.257709 kubelet[2774]: I1002 19:37:13.257670 2774 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=47f3ed60-537c-43f6-aeda-8f89297eb12a path="/var/lib/kubelet/pods/47f3ed60-537c-43f6-aeda-8f89297eb12a/volumes" Oct 2 19:37:16.386940 kubelet[2774]: E1002 19:37:16.386910 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:21.388452 kubelet[2774]: E1002 19:37:21.388417 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:26.389303 kubelet[2774]: E1002 19:37:26.389269 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:37:26.639986 systemd[1]: cri-containerd-01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a.scope: Deactivated successfully. Oct 2 19:37:26.640307 systemd[1]: cri-containerd-01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a.scope: Consumed 2.061s CPU time. Oct 2 19:37:26.644000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:37:26.644000 audit: BPF prog-id=106 op=UNLOAD Oct 2 19:37:26.654257 kernel: audit: type=1334 audit(1696275446.644:1456): prog-id=89 op=UNLOAD Oct 2 19:37:26.654360 kernel: audit: type=1334 audit(1696275446.644:1457): prog-id=106 op=UNLOAD Oct 2 19:37:26.702517 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a-rootfs.mount: Deactivated successfully. Oct 2 19:37:26.740465 env[1634]: time="2023-10-02T19:37:26.740404797Z" level=info msg="shim disconnected" id=01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a Oct 2 19:37:26.740465 env[1634]: time="2023-10-02T19:37:26.740460744Z" level=warning msg="cleaning up after shim disconnected" id=01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a namespace=k8s.io Oct 2 19:37:26.740465 env[1634]: time="2023-10-02T19:37:26.740473856Z" level=info msg="cleaning up dead shim" Oct 2 19:37:26.752077 env[1634]: time="2023-10-02T19:37:26.752030172Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4188 runtime=io.containerd.runc.v2\n" Oct 2 19:37:26.938924 systemd[1]: cri-containerd-3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f.scope: Deactivated successfully. Oct 2 19:37:26.939456 systemd[1]: cri-containerd-3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f.scope: Consumed 4.955s CPU time. Oct 2 19:37:26.942000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:37:26.942000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:37:26.948596 kernel: audit: type=1334 audit(1696275446.942:1458): prog-id=85 op=UNLOAD Oct 2 19:37:26.948692 kernel: audit: type=1334 audit(1696275446.942:1459): prog-id=112 op=UNLOAD Oct 2 19:37:26.974591 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f-rootfs.mount: Deactivated successfully. Oct 2 19:37:26.992445 env[1634]: time="2023-10-02T19:37:26.992352185Z" level=info msg="shim disconnected" id=3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f Oct 2 19:37:26.993173 env[1634]: time="2023-10-02T19:37:26.992450076Z" level=warning msg="cleaning up after shim disconnected" id=3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f namespace=k8s.io Oct 2 19:37:26.993173 env[1634]: time="2023-10-02T19:37:26.992466040Z" level=info msg="cleaning up dead shim" Oct 2 19:37:27.003684 env[1634]: time="2023-10-02T19:37:27.003641016Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:37:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4214 runtime=io.containerd.runc.v2\n" Oct 2 19:37:27.260689 kubelet[2774]: I1002 19:37:27.260656 2774 scope.go:115] "RemoveContainer" containerID="01fa05d6ef86972fc38f36f393addcf53bfb29588994a5328fcbc5780fddd08a" Oct 2 19:37:27.268816 env[1634]: time="2023-10-02T19:37:27.268715591Z" level=info msg="CreateContainer within sandbox \"ec014461e397a55ee46759a5784c9c10f2b5976fba4cfcf4dd9e01d8d04fc2f3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:37:27.292330 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4043485917.mount: Deactivated successfully. Oct 2 19:37:27.317086 env[1634]: time="2023-10-02T19:37:27.317035084Z" level=info msg="CreateContainer within sandbox \"ec014461e397a55ee46759a5784c9c10f2b5976fba4cfcf4dd9e01d8d04fc2f3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"11bf751d8ac213df936d2b3d7a4fd583663b1416f42cb270e91a7caa7eec1e01\"" Oct 2 19:37:27.318418 env[1634]: time="2023-10-02T19:37:27.318375368Z" level=info msg="StartContainer for \"11bf751d8ac213df936d2b3d7a4fd583663b1416f42cb270e91a7caa7eec1e01\"" Oct 2 19:37:27.362524 systemd[1]: Started cri-containerd-11bf751d8ac213df936d2b3d7a4fd583663b1416f42cb270e91a7caa7eec1e01.scope. Oct 2 19:37:27.397152 kernel: audit: type=1400 audit(1696275447.382:1460): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.397390 kernel: audit: type=1400 audit(1696275447.382:1461): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.402396 kernel: audit: type=1400 audit(1696275447.382:1462): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.413212 kernel: audit: type=1400 audit(1696275447.382:1463): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.413940 kernel: audit: type=1400 audit(1696275447.382:1464): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.413990 kernel: audit: type=1400 audit(1696275447.382:1465): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.382000 audit: BPF prog-id=142 op=LOAD Oct 2 19:37:27.384000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.384000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2522 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:27.384000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131626637353164386163323133646639333664326233643761346664 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2522 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:27.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131626637353164386163323133646639333664326233643761346664 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.386000 audit: BPF prog-id=143 op=LOAD Oct 2 19:37:27.386000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001c0250 items=0 ppid=2522 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:27.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131626637353164386163323133646639333664326233643761346664 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.388000 audit: BPF prog-id=144 op=LOAD Oct 2 19:37:27.388000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001c0298 items=0 ppid=2522 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:27.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131626637353164386163323133646639333664326233643761346664 Oct 2 19:37:27.395000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:37:27.395000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { perfmon } for pid=4234 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit[4234]: AVC avc: denied { bpf } for pid=4234 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:27.395000 audit: BPF prog-id=145 op=LOAD Oct 2 19:37:27.395000 audit[4234]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001c06a8 items=0 ppid=2522 pid=4234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:27.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131626637353164386163323133646639333664326233643761346664 Oct 2 19:37:27.497019 env[1634]: time="2023-10-02T19:37:27.494669537Z" level=info msg="StartContainer for \"11bf751d8ac213df936d2b3d7a4fd583663b1416f42cb270e91a7caa7eec1e01\" returns successfully" Oct 2 19:37:27.705156 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount686633914.mount: Deactivated successfully. Oct 2 19:37:28.264895 kubelet[2774]: I1002 19:37:28.264692 2774 scope.go:115] "RemoveContainer" containerID="3acfd38ddfca50703d5762147b309a115d42375dec1013409ac3e7d884c51e1f" Oct 2 19:37:28.272005 env[1634]: time="2023-10-02T19:37:28.271957619Z" level=info msg="CreateContainer within sandbox \"344eb82abdff55a38d5e0f6583ddc4dbcb9e57195f57887597c8632587d496e9\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:37:28.300389 env[1634]: time="2023-10-02T19:37:28.300330368Z" level=info msg="CreateContainer within sandbox \"344eb82abdff55a38d5e0f6583ddc4dbcb9e57195f57887597c8632587d496e9\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"a789f63b2ac174e4bd58c5a1f6d22eb9ebc95d4e73541ded9fbccdfe50ac7a72\"" Oct 2 19:37:28.300909 env[1634]: time="2023-10-02T19:37:28.300878839Z" level=info msg="StartContainer for \"a789f63b2ac174e4bd58c5a1f6d22eb9ebc95d4e73541ded9fbccdfe50ac7a72\"" Oct 2 19:37:28.360404 systemd[1]: Started cri-containerd-a789f63b2ac174e4bd58c5a1f6d22eb9ebc95d4e73541ded9fbccdfe50ac7a72.scope. Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.387000 audit: BPF prog-id=146 op=LOAD Oct 2 19:37:28.387000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.387000 audit[4272]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2476 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:28.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383966363362326163313734653462643538633561316636643232 Oct 2 19:37:28.387000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.387000 audit[4272]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2476 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:28.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383966363362326163313734653462643538633561316636643232 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit: BPF prog-id=147 op=LOAD Oct 2 19:37:28.388000 audit[4272]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024390 items=0 ppid=2476 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:28.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383966363362326163313734653462643538633561316636643232 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit: BPF prog-id=148 op=LOAD Oct 2 19:37:28.388000 audit[4272]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000243d8 items=0 ppid=2476 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:28.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383966363362326163313734653462643538633561316636643232 Oct 2 19:37:28.388000 audit: BPF prog-id=148 op=UNLOAD Oct 2 19:37:28.388000 audit: BPF prog-id=147 op=UNLOAD Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { perfmon } for pid=4272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit[4272]: AVC avc: denied { bpf } for pid=4272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:37:28.388000 audit: BPF prog-id=149 op=LOAD Oct 2 19:37:28.388000 audit[4272]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000247e8 items=0 ppid=2476 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:37:28.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383966363362326163313734653462643538633561316636643232 Oct 2 19:37:28.565701 env[1634]: time="2023-10-02T19:37:28.565589911Z" level=info msg="StartContainer for \"a789f63b2ac174e4bd58c5a1f6d22eb9ebc95d4e73541ded9fbccdfe50ac7a72\" returns successfully" Oct 2 19:37:28.710369 systemd[1]: run-containerd-runc-k8s.io-a789f63b2ac174e4bd58c5a1f6d22eb9ebc95d4e73541ded9fbccdfe50ac7a72-runc.y7iB4z.mount: Deactivated successfully. Oct 2 19:37:28.959759 kubelet[2774]: E1002 19:37:28.959327 2774 controller.go:187] failed to update lease, error: Put "https://172.31.28.204:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-204?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 19:37:29.541000 audit[4282]: AVC avc: denied { watch } for pid=4282 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.541000 audit[4282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0001c8ea0 a2=fc6 a3=0 items=0 ppid=2476 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:37:29.541000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:29.542000 audit[4282]: AVC avc: denied { watch } for pid=4282 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:37:29.542000 audit[4282]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00016a0e0 a2=fc6 a3=0 items=0 ppid=2476 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c293,c487 key=(null) Oct 2 19:37:29.542000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:37:31.391037 kubelet[2774]: E1002 19:37:31.390999 2774 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"