Oct 2 19:53:32.344869 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:53:32.344902 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:53:32.344915 kernel: BIOS-provided physical RAM map: Oct 2 19:53:32.344926 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:53:32.344935 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:53:32.344944 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:53:32.344959 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 19:53:32.344970 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 19:53:32.344981 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 19:53:32.344990 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:53:32.345001 kernel: NX (Execute Disable) protection: active Oct 2 19:53:32.345010 kernel: SMBIOS 2.7 present. Oct 2 19:53:32.345020 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 19:53:32.345031 kernel: Hypervisor detected: KVM Oct 2 19:53:32.345046 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:53:32.345057 kernel: kvm-clock: cpu 0, msr 71f8a001, primary cpu clock Oct 2 19:53:32.345070 kernel: kvm-clock: using sched offset of 7254320283 cycles Oct 2 19:53:32.345081 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:53:32.345092 kernel: tsc: Detected 2499.996 MHz processor Oct 2 19:53:32.345105 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:53:32.345120 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:53:32.345131 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 19:53:32.345143 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:53:32.345154 kernel: Using GB pages for direct mapping Oct 2 19:53:32.345165 kernel: ACPI: Early table checksum verification disabled Oct 2 19:53:32.345176 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 19:53:32.345188 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 19:53:32.345199 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:53:32.345210 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 19:53:32.345224 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 19:53:32.345235 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:53:32.345246 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:53:32.345258 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 19:53:32.345269 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:53:32.345281 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 19:53:32.345292 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 19:53:32.345303 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:53:32.345317 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 19:53:32.345329 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 19:53:32.345341 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 19:53:32.345357 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 19:53:32.345369 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 19:53:32.345381 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 19:53:32.345393 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 19:53:32.345408 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 19:53:32.345420 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 19:53:32.345432 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 19:53:32.352606 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:53:32.352643 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:53:32.352658 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 19:53:32.352671 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 19:53:32.352685 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 19:53:32.352707 kernel: Zone ranges: Oct 2 19:53:32.352720 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:53:32.352733 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 19:53:32.352746 kernel: Normal empty Oct 2 19:53:32.352759 kernel: Movable zone start for each node Oct 2 19:53:32.352771 kernel: Early memory node ranges Oct 2 19:53:32.352784 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:53:32.352796 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 19:53:32.352809 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 19:53:32.352825 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:53:32.352837 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:53:32.352849 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 19:53:32.352861 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 19:53:32.352971 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:53:32.352984 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 19:53:32.352996 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:53:32.353009 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:53:32.353022 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:53:32.353037 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:53:32.353050 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:53:32.353063 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:53:32.353075 kernel: TSC deadline timer available Oct 2 19:53:32.353087 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:53:32.353099 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 19:53:32.353113 kernel: Booting paravirtualized kernel on KVM Oct 2 19:53:32.353126 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:53:32.353139 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:53:32.353154 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:53:32.353166 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:53:32.353178 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:53:32.353190 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 19:53:32.353203 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:53:32.353216 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:53:32.353229 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 19:53:32.353241 kernel: Policy zone: DMA32 Oct 2 19:53:32.353256 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:53:32.353272 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:53:32.353408 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:53:32.353424 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:53:32.353438 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:53:32.353462 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 19:53:32.353476 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:53:32.353488 kernel: Kernel/User page tables isolation: enabled Oct 2 19:53:32.353500 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:53:32.353517 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:53:32.353529 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:53:32.353543 kernel: rcu: RCU event tracing is enabled. Oct 2 19:53:32.353555 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:53:32.353568 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:53:32.353580 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:53:32.353592 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:53:32.353605 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:53:32.353618 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:53:32.353632 kernel: random: crng init done Oct 2 19:53:32.353644 kernel: Console: colour VGA+ 80x25 Oct 2 19:53:32.353656 kernel: printk: console [ttyS0] enabled Oct 2 19:53:32.353669 kernel: ACPI: Core revision 20210730 Oct 2 19:53:32.353683 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 19:53:32.353695 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:53:32.353707 kernel: x2apic enabled Oct 2 19:53:32.353719 kernel: Switched APIC routing to physical x2apic. Oct 2 19:53:32.353732 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Oct 2 19:53:32.353745 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499996) Oct 2 19:53:32.353760 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:53:32.353772 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:53:32.353785 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:53:32.353806 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:53:32.353821 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:53:32.353834 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:53:32.353847 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:53:32.353868 kernel: RETBleed: Vulnerable Oct 2 19:53:32.353880 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:53:32.353893 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:53:32.353906 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:53:32.353919 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:53:32.353931 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:53:32.353946 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:53:32.353960 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:53:32.354035 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 19:53:32.354050 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 19:53:32.354065 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:53:32.354078 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:53:32.354099 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:53:32.354113 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 19:53:32.354128 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:53:32.354142 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 19:53:32.354156 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 19:53:32.354170 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 19:53:32.354183 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 19:53:32.354196 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 19:53:32.354211 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 19:53:32.354225 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 19:53:32.354239 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:53:32.354255 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:53:32.354269 kernel: LSM: Security Framework initializing Oct 2 19:53:32.354282 kernel: SELinux: Initializing. Oct 2 19:53:32.354295 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:53:32.354310 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:53:32.354323 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:53:32.354336 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:53:32.354351 kernel: signal: max sigframe size: 3632 Oct 2 19:53:32.354364 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:53:32.354378 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:53:32.354391 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:53:32.354407 kernel: x86: Booting SMP configuration: Oct 2 19:53:32.354421 kernel: .... node #0, CPUs: #1 Oct 2 19:53:32.354435 kernel: kvm-clock: cpu 1, msr 71f8a041, secondary cpu clock Oct 2 19:53:32.354464 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 19:53:32.354481 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 19:53:32.354496 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:53:32.354511 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:53:32.354524 kernel: smpboot: Max logical packages: 1 Oct 2 19:53:32.354541 kernel: smpboot: Total of 2 processors activated (9999.98 BogoMIPS) Oct 2 19:53:32.354555 kernel: devtmpfs: initialized Oct 2 19:53:32.354568 kernel: x86/mm: Memory block size: 128MB Oct 2 19:53:32.354583 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:53:32.354596 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:53:32.354610 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:53:32.354623 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:53:32.354637 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:53:32.354652 kernel: audit: type=2000 audit(1696276411.346:1): state=initialized audit_enabled=0 res=1 Oct 2 19:53:32.354669 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:53:32.354683 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:53:32.354696 kernel: cpuidle: using governor menu Oct 2 19:53:32.354708 kernel: ACPI: bus type PCI registered Oct 2 19:53:32.354722 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:53:32.354738 kernel: dca service started, version 1.12.1 Oct 2 19:53:32.354752 kernel: PCI: Using configuration type 1 for base access Oct 2 19:53:32.354767 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:53:32.354781 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:53:32.354799 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:53:32.354814 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:53:32.354828 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:53:32.354841 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:53:32.354854 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:53:32.354868 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:53:32.354882 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:53:32.354896 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:53:32.354910 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 19:53:32.354934 kernel: ACPI: Interpreter enabled Oct 2 19:53:32.354947 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:53:32.354961 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:53:32.354976 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:53:32.354989 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 19:53:32.355003 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:53:32.355249 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:53:32.355777 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:53:32.355893 kernel: acpiphp: Slot [3] registered Oct 2 19:53:32.355909 kernel: acpiphp: Slot [4] registered Oct 2 19:53:32.355923 kernel: acpiphp: Slot [5] registered Oct 2 19:53:32.355936 kernel: acpiphp: Slot [6] registered Oct 2 19:53:32.355948 kernel: acpiphp: Slot [7] registered Oct 2 19:53:32.355961 kernel: acpiphp: Slot [8] registered Oct 2 19:53:32.355975 kernel: acpiphp: Slot [9] registered Oct 2 19:53:32.355989 kernel: acpiphp: Slot [10] registered Oct 2 19:53:32.356002 kernel: acpiphp: Slot [11] registered Oct 2 19:53:32.356019 kernel: acpiphp: Slot [12] registered Oct 2 19:53:32.356032 kernel: acpiphp: Slot [13] registered Oct 2 19:53:32.356046 kernel: acpiphp: Slot [14] registered Oct 2 19:53:32.356059 kernel: acpiphp: Slot [15] registered Oct 2 19:53:32.356071 kernel: acpiphp: Slot [16] registered Oct 2 19:53:32.356084 kernel: acpiphp: Slot [17] registered Oct 2 19:53:32.356097 kernel: acpiphp: Slot [18] registered Oct 2 19:53:32.356110 kernel: acpiphp: Slot [19] registered Oct 2 19:53:32.356123 kernel: acpiphp: Slot [20] registered Oct 2 19:53:32.356140 kernel: acpiphp: Slot [21] registered Oct 2 19:53:32.356152 kernel: acpiphp: Slot [22] registered Oct 2 19:53:32.356165 kernel: acpiphp: Slot [23] registered Oct 2 19:53:32.356178 kernel: acpiphp: Slot [24] registered Oct 2 19:53:32.356191 kernel: acpiphp: Slot [25] registered Oct 2 19:53:32.356204 kernel: acpiphp: Slot [26] registered Oct 2 19:53:32.356217 kernel: acpiphp: Slot [27] registered Oct 2 19:53:32.356230 kernel: acpiphp: Slot [28] registered Oct 2 19:53:32.356243 kernel: acpiphp: Slot [29] registered Oct 2 19:53:32.356256 kernel: acpiphp: Slot [30] registered Oct 2 19:53:32.356271 kernel: acpiphp: Slot [31] registered Oct 2 19:53:32.356284 kernel: PCI host bridge to bus 0000:00 Oct 2 19:53:32.356422 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:53:32.366731 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:53:32.366873 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:53:32.366983 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:53:32.367579 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:53:32.367742 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:53:32.367873 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:53:32.368002 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 19:53:32.368211 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 19:53:32.368334 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 19:53:32.368469 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 19:53:32.368587 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 19:53:32.368838 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 19:53:32.368962 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 19:53:32.369080 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 19:53:32.386622 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 19:53:32.386790 kernel: pci 0000:00:01.3: quirk_piix4_acpi+0x0/0x170 took 11718 usecs Oct 2 19:53:32.386928 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 19:53:32.387514 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 19:53:32.387681 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 19:53:32.387804 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:53:32.387935 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:53:32.388058 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 19:53:32.388193 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:53:32.388315 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 19:53:32.388335 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:53:32.388349 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:53:32.388364 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:53:32.388378 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:53:32.388392 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:53:32.388405 kernel: iommu: Default domain type: Translated Oct 2 19:53:32.388418 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:53:32.388546 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 19:53:32.388730 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:53:32.388858 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 19:53:32.388875 kernel: vgaarb: loaded Oct 2 19:53:32.388888 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:53:32.388902 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:53:32.388916 kernel: PTP clock support registered Oct 2 19:53:32.388929 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:53:32.388942 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:53:32.388956 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:53:32.388972 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 19:53:32.388984 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 19:53:32.388997 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 19:53:32.389010 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:53:32.389024 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:53:32.389039 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:53:32.389052 kernel: pnp: PnP ACPI init Oct 2 19:53:32.389065 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:53:32.389078 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:53:32.389095 kernel: NET: Registered PF_INET protocol family Oct 2 19:53:32.389156 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:53:32.389172 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:53:32.389291 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:53:32.389346 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:53:32.389361 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:53:32.389376 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:53:32.389425 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:53:32.389441 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:53:32.389545 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:53:32.389559 kernel: NET: Registered PF_XDP protocol family Oct 2 19:53:32.389801 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:53:32.390404 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:53:32.390797 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:53:32.390919 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:53:32.391134 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:53:32.391262 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:53:32.391286 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:53:32.391301 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:53:32.391314 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Oct 2 19:53:32.391328 kernel: clocksource: Switched to clocksource tsc Oct 2 19:53:32.391342 kernel: Initialise system trusted keyrings Oct 2 19:53:32.391356 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:53:32.391370 kernel: Key type asymmetric registered Oct 2 19:53:32.391383 kernel: Asymmetric key parser 'x509' registered Oct 2 19:53:32.391436 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:53:32.405513 kernel: io scheduler mq-deadline registered Oct 2 19:53:32.405542 kernel: io scheduler kyber registered Oct 2 19:53:32.405666 kernel: io scheduler bfq registered Oct 2 19:53:32.405683 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:53:32.405697 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:53:32.405712 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:53:32.405726 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:53:32.405740 kernel: i8042: Warning: Keylock active Oct 2 19:53:32.405760 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:53:32.405774 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:53:32.405993 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 19:53:32.406112 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 19:53:32.406223 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T19:53:31 UTC (1696276411) Oct 2 19:53:32.406630 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 19:53:32.406657 kernel: intel_pstate: CPU model not supported Oct 2 19:53:32.406672 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:53:32.406691 kernel: Segment Routing with IPv6 Oct 2 19:53:32.406704 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:53:32.406718 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:53:32.406732 kernel: Key type dns_resolver registered Oct 2 19:53:32.406745 kernel: IPI shorthand broadcast: enabled Oct 2 19:53:32.406758 kernel: sched_clock: Marking stable (696810129, 275492327)->(1120779468, -148477012) Oct 2 19:53:32.406772 kernel: registered taskstats version 1 Oct 2 19:53:32.406785 kernel: Loading compiled-in X.509 certificates Oct 2 19:53:32.406799 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:53:32.406815 kernel: Key type .fscrypt registered Oct 2 19:53:32.406828 kernel: Key type fscrypt-provisioning registered Oct 2 19:53:32.406842 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:53:32.406856 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:53:32.406869 kernel: ima: No architecture policies found Oct 2 19:53:32.406883 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:53:32.406896 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:53:32.406910 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:53:32.406924 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:53:32.406940 kernel: Run /init as init process Oct 2 19:53:32.406953 kernel: with arguments: Oct 2 19:53:32.406967 kernel: /init Oct 2 19:53:32.406980 kernel: with environment: Oct 2 19:53:32.406993 kernel: HOME=/ Oct 2 19:53:32.407006 kernel: TERM=linux Oct 2 19:53:32.407018 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:53:32.407036 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:53:32.407055 systemd[1]: Detected virtualization amazon. Oct 2 19:53:32.407069 systemd[1]: Detected architecture x86-64. Oct 2 19:53:32.407083 systemd[1]: Running in initrd. Oct 2 19:53:32.407097 systemd[1]: No hostname configured, using default hostname. Oct 2 19:53:32.407125 systemd[1]: Hostname set to . Oct 2 19:53:32.407145 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:53:32.407160 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:53:32.407175 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:53:32.407189 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:53:32.407203 systemd[1]: Reached target cryptsetup.target. Oct 2 19:53:32.407218 systemd[1]: Reached target paths.target. Oct 2 19:53:32.407232 systemd[1]: Reached target slices.target. Oct 2 19:53:32.407246 systemd[1]: Reached target swap.target. Oct 2 19:53:32.407260 systemd[1]: Reached target timers.target. Oct 2 19:53:32.407279 systemd[1]: Listening on iscsid.socket. Oct 2 19:53:32.407294 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:53:32.407308 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:53:32.407323 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:53:32.407338 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:53:32.407352 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:53:32.407379 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:53:32.407394 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:53:32.407412 systemd[1]: Reached target sockets.target. Oct 2 19:53:32.407426 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:53:32.407440 systemd[1]: Finished network-cleanup.service. Oct 2 19:53:32.407465 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:53:32.407479 systemd[1]: Starting systemd-journald.service... Oct 2 19:53:32.407493 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:53:32.407507 systemd[1]: Starting systemd-resolved.service... Oct 2 19:53:32.407521 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:53:32.407536 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:53:32.407553 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:53:32.407574 systemd-journald[184]: Journal started Oct 2 19:53:32.407643 systemd-journald[184]: Runtime Journal (/run/log/journal/ec2b2caa2c10825d3d76ac02e7d89882) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:53:32.347495 systemd-modules-load[185]: Inserted module 'overlay' Oct 2 19:53:32.500945 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:53:32.500982 kernel: Bridge firewalling registered Oct 2 19:53:32.500999 kernel: SCSI subsystem initialized Oct 2 19:53:32.501015 kernel: audit: type=1130 audit(1696276412.493:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.426187 systemd-resolved[186]: Positive Trust Anchors: Oct 2 19:53:32.426200 systemd-resolved[186]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:53:32.510106 systemd[1]: Started systemd-journald.service. Oct 2 19:53:32.426250 systemd-resolved[186]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:53:32.435513 systemd-resolved[186]: Defaulting to hostname 'linux'. Oct 2 19:53:32.534067 kernel: audit: type=1130 audit(1696276412.508:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.534102 kernel: audit: type=1130 audit(1696276412.521:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.534153 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:53:32.534173 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:53:32.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.442305 systemd-modules-load[185]: Inserted module 'br_netfilter' Oct 2 19:53:32.510322 systemd[1]: Started systemd-resolved.service. Oct 2 19:53:32.545417 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:53:32.545463 kernel: audit: type=1130 audit(1696276412.537:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.534794 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:53:32.546880 systemd[1]: Reached target nss-lookup.target. Oct 2 19:53:32.550322 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:53:32.554440 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:53:32.565521 systemd-modules-load[185]: Inserted module 'dm_multipath' Oct 2 19:53:32.568497 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:53:32.576457 kernel: audit: type=1130 audit(1696276412.567:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.569579 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:53:32.587000 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:53:32.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.596475 kernel: audit: type=1130 audit(1696276412.587:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.598193 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:53:32.605931 kernel: audit: type=1130 audit(1696276412.598:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.604872 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:53:32.608518 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:53:32.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.619467 kernel: audit: type=1130 audit(1696276412.611:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.626647 dracut-cmdline[209]: dracut-dracut-053 Oct 2 19:53:32.630551 dracut-cmdline[209]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:53:32.740477 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:53:32.756475 kernel: iscsi: registered transport (tcp) Oct 2 19:53:32.820576 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:53:32.820637 kernel: QLogic iSCSI HBA Driver Oct 2 19:53:32.884130 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:53:32.893767 kernel: audit: type=1130 audit(1696276412.885:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:32.891592 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:53:32.980510 kernel: raid6: avx512x4 gen() 13863 MB/s Oct 2 19:53:32.998531 kernel: raid6: avx512x4 xor() 6780 MB/s Oct 2 19:53:33.016505 kernel: raid6: avx512x2 gen() 7390 MB/s Oct 2 19:53:33.033493 kernel: raid6: avx512x2 xor() 16940 MB/s Oct 2 19:53:33.050532 kernel: raid6: avx512x1 gen() 12354 MB/s Oct 2 19:53:33.068501 kernel: raid6: avx512x1 xor() 16282 MB/s Oct 2 19:53:33.086504 kernel: raid6: avx2x4 gen() 11884 MB/s Oct 2 19:53:33.104481 kernel: raid6: avx2x4 xor() 6007 MB/s Oct 2 19:53:33.122502 kernel: raid6: avx2x2 gen() 14701 MB/s Oct 2 19:53:33.140485 kernel: raid6: avx2x2 xor() 12332 MB/s Oct 2 19:53:33.157562 kernel: raid6: avx2x1 gen() 11387 MB/s Oct 2 19:53:33.175520 kernel: raid6: avx2x1 xor() 11501 MB/s Oct 2 19:53:33.194518 kernel: raid6: sse2x4 gen() 6038 MB/s Oct 2 19:53:33.215493 kernel: raid6: sse2x4 xor() 2290 MB/s Oct 2 19:53:33.233507 kernel: raid6: sse2x2 gen() 3839 MB/s Oct 2 19:53:33.254771 kernel: raid6: sse2x2 xor() 2040 MB/s Oct 2 19:53:33.274498 kernel: raid6: sse2x1 gen() 4189 MB/s Oct 2 19:53:33.293655 kernel: raid6: sse2x1 xor() 3246 MB/s Oct 2 19:53:33.293730 kernel: raid6: using algorithm avx2x2 gen() 14701 MB/s Oct 2 19:53:33.293749 kernel: raid6: .... xor() 12332 MB/s, rmw enabled Oct 2 19:53:33.295084 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:53:33.322244 kernel: xor: automatically using best checksumming function avx Oct 2 19:53:33.533588 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:53:33.554138 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:53:33.554000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.556000 audit: BPF prog-id=7 op=LOAD Oct 2 19:53:33.556000 audit: BPF prog-id=8 op=LOAD Oct 2 19:53:33.559021 systemd[1]: Starting systemd-udevd.service... Oct 2 19:53:33.590377 systemd-udevd[386]: Using default interface naming scheme 'v252'. Oct 2 19:53:33.616033 systemd[1]: Started systemd-udevd.service. Oct 2 19:53:33.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.622827 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:53:33.656128 dracut-pre-trigger[394]: rd.md=0: removing MD RAID activation Oct 2 19:53:33.710727 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:53:33.714774 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:53:33.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.786404 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:53:33.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.880292 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:53:33.881154 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:53:33.884487 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 19:53:33.890466 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:53:33.903113 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:80:33:38:97:73 Oct 2 19:53:33.917774 (udev-worker)[440]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:53:33.932466 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:53:33.936952 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:53:33.940477 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:53:33.940543 kernel: AES CTR mode by8 optimization enabled Oct 2 19:53:33.947468 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:53:33.951478 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:53:33.951538 kernel: GPT:9289727 != 16777215 Oct 2 19:53:33.951555 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:53:33.951573 kernel: GPT:9289727 != 16777215 Oct 2 19:53:33.951587 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:53:33.951603 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:34.023476 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (445) Oct 2 19:53:34.060480 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:53:34.163272 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:53:34.169141 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:53:34.180342 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:53:34.180488 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:53:34.190593 systemd[1]: Starting disk-uuid.service... Oct 2 19:53:34.202440 disk-uuid[586]: Primary Header is updated. Oct 2 19:53:34.202440 disk-uuid[586]: Secondary Entries is updated. Oct 2 19:53:34.202440 disk-uuid[586]: Secondary Header is updated. Oct 2 19:53:34.209471 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:34.216580 kernel: GPT:disk_guids don't match. Oct 2 19:53:34.216642 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:53:34.216654 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:34.226543 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:35.225546 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:35.226177 disk-uuid[587]: The operation has completed successfully. Oct 2 19:53:35.455363 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:53:35.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:35.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:35.455499 systemd[1]: Finished disk-uuid.service. Oct 2 19:53:35.496395 systemd[1]: Starting verity-setup.service... Oct 2 19:53:35.535959 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:53:35.659339 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:53:35.661982 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:53:35.664243 systemd[1]: Finished verity-setup.service. Oct 2 19:53:35.668000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:35.809464 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:53:35.810740 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:53:35.812655 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:53:35.815526 systemd[1]: Starting ignition-setup.service... Oct 2 19:53:35.831086 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:53:35.853615 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:53:35.853735 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:53:35.853755 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:53:35.887336 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:53:35.908787 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:53:35.937616 systemd[1]: Finished ignition-setup.service. Oct 2 19:53:35.952656 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:53:35.952771 kernel: audit: type=1130 audit(1696276415.938:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:35.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:35.943277 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:53:35.975531 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:53:35.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:35.979674 systemd[1]: Starting systemd-networkd.service... Oct 2 19:53:35.990427 kernel: audit: type=1130 audit(1696276415.977:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:35.990478 kernel: audit: type=1334 audit(1696276415.977:22): prog-id=9 op=LOAD Oct 2 19:53:35.977000 audit: BPF prog-id=9 op=LOAD Oct 2 19:53:36.025768 systemd-networkd[1099]: lo: Link UP Oct 2 19:53:36.026099 systemd-networkd[1099]: lo: Gained carrier Oct 2 19:53:36.027875 systemd-networkd[1099]: Enumeration completed Oct 2 19:53:36.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.028062 systemd[1]: Started systemd-networkd.service. Oct 2 19:53:36.040585 kernel: audit: type=1130 audit(1696276416.031:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.028795 systemd-networkd[1099]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:53:36.033110 systemd[1]: Reached target network.target. Oct 2 19:53:36.043222 systemd[1]: Starting iscsiuio.service... Oct 2 19:53:36.051643 systemd-networkd[1099]: eth0: Link UP Oct 2 19:53:36.053455 systemd[1]: Started iscsiuio.service. Oct 2 19:53:36.055543 systemd-networkd[1099]: eth0: Gained carrier Oct 2 19:53:36.068578 kernel: audit: type=1130 audit(1696276416.052:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.056502 systemd[1]: Starting iscsid.service... Oct 2 19:53:36.076543 iscsid[1104]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:53:36.078866 iscsid[1104]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:53:36.078866 iscsid[1104]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:53:36.078866 iscsid[1104]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:53:36.078866 iscsid[1104]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:53:36.078866 iscsid[1104]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:53:36.079384 systemd[1]: Started iscsid.service. Oct 2 19:53:36.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.103148 kernel: audit: type=1130 audit(1696276416.095:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.103612 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:53:36.106670 systemd-networkd[1099]: eth0: DHCPv4 address 172.31.29.37/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:53:36.120353 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:53:36.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.123425 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:53:36.136420 kernel: audit: type=1130 audit(1696276416.121:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.129173 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:53:36.130676 systemd[1]: Reached target remote-fs.target. Oct 2 19:53:36.133205 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:53:36.147919 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:53:36.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.159520 kernel: audit: type=1130 audit(1696276416.146:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.628867 ignition[1081]: Ignition 2.14.0 Oct 2 19:53:36.628883 ignition[1081]: Stage: fetch-offline Oct 2 19:53:36.629035 ignition[1081]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:36.629079 ignition[1081]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:36.656345 ignition[1081]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:36.656748 ignition[1081]: Ignition finished successfully Oct 2 19:53:36.660679 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:53:36.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.665045 systemd[1]: Starting ignition-fetch.service... Oct 2 19:53:36.675921 kernel: audit: type=1130 audit(1696276416.661:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.682193 ignition[1123]: Ignition 2.14.0 Oct 2 19:53:36.682206 ignition[1123]: Stage: fetch Oct 2 19:53:36.682405 ignition[1123]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:36.682456 ignition[1123]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:36.696914 ignition[1123]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:36.699388 ignition[1123]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:36.727809 ignition[1123]: INFO : PUT result: OK Oct 2 19:53:36.741738 ignition[1123]: DEBUG : parsed url from cmdline: "" Oct 2 19:53:36.741738 ignition[1123]: INFO : no config URL provided Oct 2 19:53:36.741738 ignition[1123]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:53:36.741738 ignition[1123]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:53:36.749986 ignition[1123]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:36.749986 ignition[1123]: INFO : PUT result: OK Oct 2 19:53:36.749986 ignition[1123]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:53:36.756975 ignition[1123]: INFO : GET result: OK Oct 2 19:53:36.759855 ignition[1123]: DEBUG : parsing config with SHA512: be720a85c74e8f626322750af78d212064d7507a0807e81929fadef043a1441d9c5eab84930b8809c3fe76ea8e2f4ce3b469b22f5568c45bd3fba4cee3b0f3f9 Oct 2 19:53:36.806441 unknown[1123]: fetched base config from "system" Oct 2 19:53:36.806728 unknown[1123]: fetched base config from "system" Oct 2 19:53:36.806740 unknown[1123]: fetched user config from "aws" Oct 2 19:53:36.810582 ignition[1123]: fetch: fetch complete Oct 2 19:53:36.810591 ignition[1123]: fetch: fetch passed Oct 2 19:53:36.810674 ignition[1123]: Ignition finished successfully Oct 2 19:53:36.815772 systemd[1]: Finished ignition-fetch.service. Oct 2 19:53:36.828517 kernel: audit: type=1130 audit(1696276416.816:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.820505 systemd[1]: Starting ignition-kargs.service... Oct 2 19:53:36.841437 ignition[1129]: Ignition 2.14.0 Oct 2 19:53:36.841492 ignition[1129]: Stage: kargs Oct 2 19:53:36.841653 ignition[1129]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:36.841677 ignition[1129]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:36.857831 ignition[1129]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:36.859690 ignition[1129]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:36.861797 ignition[1129]: INFO : PUT result: OK Oct 2 19:53:36.865735 ignition[1129]: kargs: kargs passed Oct 2 19:53:36.865799 ignition[1129]: Ignition finished successfully Oct 2 19:53:36.868363 systemd[1]: Finished ignition-kargs.service. Oct 2 19:53:36.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.869759 systemd[1]: Starting ignition-disks.service... Oct 2 19:53:36.882080 ignition[1135]: Ignition 2.14.0 Oct 2 19:53:36.882094 ignition[1135]: Stage: disks Oct 2 19:53:36.882308 ignition[1135]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:36.882347 ignition[1135]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:36.894348 ignition[1135]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:36.895982 ignition[1135]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:36.898029 ignition[1135]: INFO : PUT result: OK Oct 2 19:53:36.901621 ignition[1135]: disks: disks passed Oct 2 19:53:36.901680 ignition[1135]: Ignition finished successfully Oct 2 19:53:36.904383 systemd[1]: Finished ignition-disks.service. Oct 2 19:53:36.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.904647 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:53:36.904730 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:53:36.905083 systemd[1]: Reached target local-fs.target. Oct 2 19:53:36.905904 systemd[1]: Reached target sysinit.target. Oct 2 19:53:36.907420 systemd[1]: Reached target basic.target. Oct 2 19:53:36.909437 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:53:36.956017 systemd-fsck[1143]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:53:36.962580 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:53:36.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.966772 systemd[1]: Mounting sysroot.mount... Oct 2 19:53:36.987469 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:53:36.989509 systemd[1]: Mounted sysroot.mount. Oct 2 19:53:36.992101 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:53:37.008252 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:53:37.011721 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:53:37.011916 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:53:37.011955 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:53:37.016970 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:53:37.047599 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:53:37.064251 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:53:37.083567 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1160) Oct 2 19:53:37.094365 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:53:37.094440 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:53:37.094485 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:53:37.098417 initrd-setup-root[1165]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:53:37.107472 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:53:37.112268 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:53:37.126316 initrd-setup-root[1191]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:53:37.148856 initrd-setup-root[1199]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:53:37.156619 initrd-setup-root[1207]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:53:37.248671 systemd-networkd[1099]: eth0: Gained IPv6LL Oct 2 19:53:37.361658 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:53:37.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.363037 systemd[1]: Starting ignition-mount.service... Oct 2 19:53:37.376616 systemd[1]: Starting sysroot-boot.service... Oct 2 19:53:37.386110 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:53:37.386363 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:53:37.405712 ignition[1225]: INFO : Ignition 2.14.0 Oct 2 19:53:37.407375 ignition[1225]: INFO : Stage: mount Oct 2 19:53:37.408959 ignition[1225]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.410749 ignition[1225]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.431306 ignition[1225]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.433011 ignition[1225]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.434683 ignition[1225]: INFO : PUT result: OK Oct 2 19:53:37.438006 systemd[1]: Finished sysroot-boot.service. Oct 2 19:53:37.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.445940 ignition[1225]: INFO : mount: mount passed Oct 2 19:53:37.447231 ignition[1225]: INFO : Ignition finished successfully Oct 2 19:53:37.454601 systemd[1]: Finished ignition-mount.service. Oct 2 19:53:37.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.459410 systemd[1]: Starting ignition-files.service... Oct 2 19:53:37.475070 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:53:37.494488 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1235) Oct 2 19:53:37.498499 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:53:37.498620 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:53:37.498640 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:53:37.508470 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:53:37.512174 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:53:37.547035 ignition[1254]: INFO : Ignition 2.14.0 Oct 2 19:53:37.547035 ignition[1254]: INFO : Stage: files Oct 2 19:53:37.549949 ignition[1254]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.549949 ignition[1254]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.562650 ignition[1254]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.564785 ignition[1254]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.566473 ignition[1254]: INFO : PUT result: OK Oct 2 19:53:37.571226 ignition[1254]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:53:37.577933 ignition[1254]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:53:37.577933 ignition[1254]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:53:37.595773 ignition[1254]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:53:37.597775 ignition[1254]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:53:37.600879 unknown[1254]: wrote ssh authorized keys file for user: core Oct 2 19:53:37.602642 ignition[1254]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:53:37.606589 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:53:37.609326 ignition[1254]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 19:53:37.762539 ignition[1254]: INFO : GET result: OK Oct 2 19:53:38.385400 ignition[1254]: DEBUG : file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 19:53:38.388896 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 19:53:38.388896 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:53:38.388896 ignition[1254]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:53:38.616297 ignition[1254]: INFO : GET result: OK Oct 2 19:53:38.873698 ignition[1254]: DEBUG : file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 19:53:38.877439 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 19:53:38.877439 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:53:38.884667 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:53:38.884667 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:53:38.884667 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:38.900361 ignition[1254]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2892479222" Oct 2 19:53:38.911532 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1257) Oct 2 19:53:38.911617 ignition[1254]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2892479222": device or resource busy Oct 2 19:53:38.911617 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2892479222", trying btrfs: device or resource busy Oct 2 19:53:38.911617 ignition[1254]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2892479222" Oct 2 19:53:38.911617 ignition[1254]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2892479222" Oct 2 19:53:38.911617 ignition[1254]: INFO : op(3): [started] unmounting "/mnt/oem2892479222" Oct 2 19:53:38.911617 ignition[1254]: INFO : op(3): [finished] unmounting "/mnt/oem2892479222" Oct 2 19:53:38.911617 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:53:38.911617 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:53:38.911617 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:53:38.914586 systemd[1]: mnt-oem2892479222.mount: Deactivated successfully. Oct 2 19:53:39.006213 ignition[1254]: INFO : GET result: OK Oct 2 19:53:40.279221 ignition[1254]: DEBUG : file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 19:53:40.284111 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:53:40.284111 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:53:40.284111 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:53:40.368756 ignition[1254]: INFO : GET result: OK Oct 2 19:53:41.949266 ignition[1254]: DEBUG : file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 19:53:41.952836 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:53:41.952836 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:53:41.952836 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:53:42.000617 ignition[1254]: INFO : GET result: OK Oct 2 19:53:42.897044 ignition[1254]: DEBUG : file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 19:53:42.900738 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:53:42.900738 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:53:42.900738 ignition[1254]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:53:43.346104 ignition[1254]: INFO : GET result: OK Oct 2 19:53:43.601777 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:53:43.601777 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:53:43.612617 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:53:43.612617 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:53:43.612617 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:53:43.612617 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:53:43.612617 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:43.656574 ignition[1254]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3571043877" Oct 2 19:53:43.659514 ignition[1254]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3571043877": device or resource busy Oct 2 19:53:43.659514 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3571043877", trying btrfs: device or resource busy Oct 2 19:53:43.659514 ignition[1254]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3571043877" Oct 2 19:53:43.677239 ignition[1254]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3571043877" Oct 2 19:53:43.677239 ignition[1254]: INFO : op(6): [started] unmounting "/mnt/oem3571043877" Oct 2 19:53:43.673783 systemd[1]: mnt-oem3571043877.mount: Deactivated successfully. Oct 2 19:53:43.683826 ignition[1254]: INFO : op(6): [finished] unmounting "/mnt/oem3571043877" Oct 2 19:53:43.683826 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:53:43.683826 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:53:43.683826 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:43.700456 ignition[1254]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4124707906" Oct 2 19:53:43.702621 ignition[1254]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4124707906": device or resource busy Oct 2 19:53:43.702621 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4124707906", trying btrfs: device or resource busy Oct 2 19:53:43.702621 ignition[1254]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4124707906" Oct 2 19:53:43.712268 ignition[1254]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4124707906" Oct 2 19:53:43.712268 ignition[1254]: INFO : op(9): [started] unmounting "/mnt/oem4124707906" Oct 2 19:53:43.712268 ignition[1254]: INFO : op(9): [finished] unmounting "/mnt/oem4124707906" Oct 2 19:53:43.712024 systemd[1]: mnt-oem4124707906.mount: Deactivated successfully. Oct 2 19:53:43.726035 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:53:43.726035 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:53:43.726035 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:43.751649 ignition[1254]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem481827649" Oct 2 19:53:43.753644 ignition[1254]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem481827649": device or resource busy Oct 2 19:53:43.753644 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem481827649", trying btrfs: device or resource busy Oct 2 19:53:43.753644 ignition[1254]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem481827649" Oct 2 19:53:43.763346 ignition[1254]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem481827649" Oct 2 19:53:43.763346 ignition[1254]: INFO : op(c): [started] unmounting "/mnt/oem481827649" Oct 2 19:53:43.763346 ignition[1254]: INFO : op(c): [finished] unmounting "/mnt/oem481827649" Oct 2 19:53:43.763346 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:53:43.774129 ignition[1254]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(18): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(18): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(19): [started] setting preset to enabled for "nvidia.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(19): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(1c): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:53:43.812560 ignition[1254]: INFO : files: op(1c): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:53:43.812560 ignition[1254]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:53:43.812560 ignition[1254]: INFO : files: files passed Oct 2 19:53:43.812560 ignition[1254]: INFO : Ignition finished successfully Oct 2 19:53:43.871488 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 19:53:43.871533 kernel: audit: type=1130 audit(1696276423.821:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.821286 systemd[1]: Finished ignition-files.service. Oct 2 19:53:43.870822 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:53:43.877787 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:53:43.879320 systemd[1]: Starting ignition-quench.service... Oct 2 19:53:43.887404 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:53:43.887575 systemd[1]: Finished ignition-quench.service. Oct 2 19:53:43.904612 kernel: audit: type=1130 audit(1696276423.889:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.904645 kernel: audit: type=1131 audit(1696276423.890:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.904737 initrd-setup-root-after-ignition[1279]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:53:43.915648 kernel: audit: type=1130 audit(1696276423.903:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.902365 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:53:43.904670 systemd[1]: Reached target ignition-complete.target. Oct 2 19:53:43.913512 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:53:43.955784 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:53:43.955917 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:53:43.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.960473 systemd[1]: Reached target initrd-fs.target. Oct 2 19:53:43.973613 kernel: audit: type=1130 audit(1696276423.959:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.973649 kernel: audit: type=1131 audit(1696276423.959:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.973584 systemd[1]: Reached target initrd.target. Oct 2 19:53:43.974968 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:53:43.975930 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:53:43.993113 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:53:43.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.996107 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:53:44.004063 kernel: audit: type=1130 audit(1696276423.993:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.015016 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:53:44.019839 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:53:44.023572 systemd[1]: Stopped target timers.target. Oct 2 19:53:44.026093 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:53:44.026385 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:53:44.028329 systemd[1]: Stopped target initrd.target. Oct 2 19:53:44.040895 kernel: audit: type=1131 audit(1696276424.026:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.039879 systemd[1]: Stopped target basic.target. Oct 2 19:53:44.046543 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:53:44.049738 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:53:44.052247 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:53:44.056108 systemd[1]: Stopped target remote-fs.target. Oct 2 19:53:44.059578 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:53:44.062396 systemd[1]: Stopped target sysinit.target. Oct 2 19:53:44.064882 systemd[1]: Stopped target local-fs.target. Oct 2 19:53:44.071063 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:53:44.078324 systemd[1]: Stopped target swap.target. Oct 2 19:53:44.082197 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:53:44.086960 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:53:44.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.089923 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:53:44.100942 kernel: audit: type=1131 audit(1696276424.088:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.100986 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:53:44.103147 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:53:44.106189 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:53:44.106342 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:53:44.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.118476 kernel: audit: type=1131 audit(1696276424.104:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.123029 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:53:44.123514 systemd[1]: Stopped ignition-files.service. Oct 2 19:53:44.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.132199 systemd[1]: Stopping ignition-mount.service... Oct 2 19:53:44.152030 iscsid[1104]: iscsid shutting down. Oct 2 19:53:44.144948 systemd[1]: Stopping iscsid.service... Oct 2 19:53:44.157916 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:53:44.171624 ignition[1292]: INFO : Ignition 2.14.0 Oct 2 19:53:44.171624 ignition[1292]: INFO : Stage: umount Oct 2 19:53:44.171624 ignition[1292]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:44.171624 ignition[1292]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:44.177851 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:53:44.179893 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:53:44.202435 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:53:44.203862 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:53:44.207915 ignition[1292]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:44.209690 ignition[1292]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:44.213454 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:53:44.214966 systemd[1]: Stopped iscsid.service. Oct 2 19:53:44.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.218908 systemd[1]: Stopping iscsiuio.service... Oct 2 19:53:44.224544 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:53:44.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.224000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.224673 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:53:44.232627 ignition[1292]: INFO : PUT result: OK Oct 2 19:53:44.240641 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:53:44.249735 systemd[1]: Stopped iscsiuio.service. Oct 2 19:53:44.250000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.254320 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:53:44.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.254409 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:53:44.259325 ignition[1292]: INFO : umount: umount passed Oct 2 19:53:44.259325 ignition[1292]: INFO : Ignition finished successfully Oct 2 19:53:44.266134 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:53:44.266265 systemd[1]: Stopped ignition-mount.service. Oct 2 19:53:44.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.271898 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:53:44.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.271968 systemd[1]: Stopped ignition-disks.service. Oct 2 19:53:44.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.275265 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:53:44.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.275325 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:53:44.282405 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:53:44.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.282577 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:53:44.285765 systemd[1]: Stopped target network.target. Oct 2 19:53:44.288492 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:53:44.289597 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:53:44.311907 systemd[1]: Stopped target paths.target. Oct 2 19:53:44.316101 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:53:44.333403 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:53:44.334908 systemd[1]: Stopped target slices.target. Oct 2 19:53:44.338399 systemd[1]: Stopped target sockets.target. Oct 2 19:53:44.343813 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:53:44.343880 systemd[1]: Closed iscsid.socket. Oct 2 19:53:44.349687 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:53:44.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.349738 systemd[1]: Closed iscsiuio.socket. Oct 2 19:53:44.356899 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:53:44.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.357000 systemd[1]: Stopped ignition-setup.service. Oct 2 19:53:44.365094 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:53:44.365177 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:53:44.372938 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:53:44.381400 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:53:44.386196 systemd-networkd[1099]: eth0: DHCPv6 lease lost Oct 2 19:53:44.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.389182 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:53:44.389329 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:53:44.406361 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:53:44.406476 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:53:44.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.411000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:53:44.410952 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:53:44.410992 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:53:44.417783 systemd[1]: Stopping network-cleanup.service... Oct 2 19:53:44.416000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:53:44.419522 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:53:44.419603 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:53:44.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.424921 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:53:44.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.426273 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:53:44.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.427930 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:53:44.427985 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:53:44.430799 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:53:44.442525 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:53:44.443393 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:53:44.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.447960 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:53:44.449645 systemd[1]: Stopped network-cleanup.service. Oct 2 19:53:44.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.452349 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:53:44.452399 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:53:44.456772 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:53:44.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.456822 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:53:44.458599 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:53:44.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.461045 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:53:44.466740 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:53:44.466858 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:53:44.470275 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:53:44.470534 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:53:44.479737 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:53:44.491422 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 19:53:44.491000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.491522 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 19:53:44.496667 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:53:44.496723 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:53:44.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.500473 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:53:44.500536 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:53:44.502134 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:53:44.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.502222 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:53:44.506611 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:53:44.510737 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:53:44.529422 systemd[1]: Switching root. Oct 2 19:53:44.560427 systemd-journald[184]: Journal stopped Oct 2 19:53:50.947409 systemd-journald[184]: Received SIGTERM from PID 1 (systemd). Oct 2 19:53:50.947497 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:53:50.947526 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:53:50.947549 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:53:50.947568 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:53:50.947593 kernel: SELinux: policy capability open_perms=1 Oct 2 19:53:50.947613 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:53:50.947634 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:53:50.947653 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:53:50.947678 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:53:50.947701 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:53:50.947721 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:53:50.947743 systemd[1]: Successfully loaded SELinux policy in 118.652ms. Oct 2 19:53:50.947780 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 15.584ms. Oct 2 19:53:50.947808 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:53:50.947829 systemd[1]: Detected virtualization amazon. Oct 2 19:53:50.947846 systemd[1]: Detected architecture x86-64. Oct 2 19:53:50.947864 systemd[1]: Detected first boot. Oct 2 19:53:50.947887 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:53:50.947910 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:53:50.947935 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:50.947961 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:50.947983 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:50.948001 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 19:53:50.948018 kernel: audit: type=1334 audit(1696276430.451:86): prog-id=12 op=LOAD Oct 2 19:53:50.948035 kernel: audit: type=1334 audit(1696276430.451:87): prog-id=3 op=UNLOAD Oct 2 19:53:50.948055 kernel: audit: type=1334 audit(1696276430.452:88): prog-id=13 op=LOAD Oct 2 19:53:50.948074 kernel: audit: type=1334 audit(1696276430.457:89): prog-id=14 op=LOAD Oct 2 19:53:50.948090 kernel: audit: type=1334 audit(1696276430.457:90): prog-id=4 op=UNLOAD Oct 2 19:53:50.948107 kernel: audit: type=1334 audit(1696276430.457:91): prog-id=5 op=UNLOAD Oct 2 19:53:50.948125 kernel: audit: type=1131 audit(1696276430.460:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.948143 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:53:50.948161 kernel: audit: type=1334 audit(1696276430.475:93): prog-id=12 op=UNLOAD Oct 2 19:53:50.948179 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:53:50.948198 kernel: audit: type=1130 audit(1696276430.482:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.948221 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:53:50.948244 kernel: audit: type=1131 audit(1696276430.483:95): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.948264 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:53:50.948284 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:53:50.948304 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:53:50.948325 systemd[1]: Created slice system-getty.slice. Oct 2 19:53:50.948347 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:53:50.948369 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:53:50.948389 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:53:50.948409 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:53:50.948429 systemd[1]: Created slice user.slice. Oct 2 19:53:50.949545 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:53:50.949576 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:53:50.949598 systemd[1]: Set up automount boot.automount. Oct 2 19:53:50.949615 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:53:50.949640 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:53:50.949669 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:53:50.949690 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:53:50.949709 systemd[1]: Reached target integritysetup.target. Oct 2 19:53:50.949728 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:53:50.949750 systemd[1]: Reached target remote-fs.target. Oct 2 19:53:50.949769 systemd[1]: Reached target slices.target. Oct 2 19:53:50.949788 systemd[1]: Reached target swap.target. Oct 2 19:53:50.949807 systemd[1]: Reached target torcx.target. Oct 2 19:53:50.949836 systemd[1]: Reached target veritysetup.target. Oct 2 19:53:50.949856 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:53:50.949872 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:53:50.949891 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:53:50.949908 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:53:50.949926 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:53:50.949947 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:53:50.949967 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:53:50.949987 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:53:50.950008 systemd[1]: Mounting media.mount... Oct 2 19:53:50.950028 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:53:50.950164 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:53:50.950189 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:53:50.950210 systemd[1]: Mounting tmp.mount... Oct 2 19:53:50.950231 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:53:50.950254 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:53:50.950276 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:53:50.950297 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:53:50.950316 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:53:50.950338 systemd[1]: Starting modprobe@drm.service... Oct 2 19:53:50.950359 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:53:50.950381 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:53:50.950402 systemd[1]: Starting modprobe@loop.service... Oct 2 19:53:50.950424 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:53:50.956181 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:53:50.956242 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:53:50.956264 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:53:50.956286 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:53:50.956307 systemd[1]: Stopped systemd-journald.service. Oct 2 19:53:50.956330 systemd[1]: Starting systemd-journald.service... Oct 2 19:53:50.956351 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:53:50.956372 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:53:50.956395 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:53:50.956421 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:53:50.956630 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:53:50.956652 systemd[1]: Stopped verity-setup.service. Oct 2 19:53:50.956673 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:53:50.956694 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:53:50.956719 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:53:50.956738 systemd[1]: Mounted media.mount. Oct 2 19:53:50.956757 kernel: loop: module loaded Oct 2 19:53:50.956776 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:53:50.956800 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:53:50.956819 systemd[1]: Mounted tmp.mount. Oct 2 19:53:50.956837 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:53:50.956857 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:53:50.956877 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:53:50.956896 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:53:50.956917 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:53:50.956938 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:53:50.956957 systemd[1]: Finished modprobe@drm.service. Oct 2 19:53:50.956979 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:53:50.956999 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:53:50.957019 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:53:50.957038 systemd[1]: Finished modprobe@loop.service. Oct 2 19:53:50.957076 kernel: fuse: init (API version 7.34) Oct 2 19:53:50.957101 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:53:50.961560 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:53:50.963108 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:53:50.963135 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:53:50.963159 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:53:50.963189 systemd[1]: Reached target network-pre.target. Oct 2 19:53:50.963212 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:53:50.963234 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:53:50.963256 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:53:50.963276 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:53:50.963303 systemd-journald[1399]: Journal started Oct 2 19:53:50.963383 systemd-journald[1399]: Runtime Journal (/run/log/journal/ec2b2caa2c10825d3d76ac02e7d89882) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:53:45.216000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:53:45.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:53:45.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:53:45.364000 audit: BPF prog-id=10 op=LOAD Oct 2 19:53:45.364000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:53:45.364000 audit: BPF prog-id=11 op=LOAD Oct 2 19:53:45.364000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:53:50.451000 audit: BPF prog-id=12 op=LOAD Oct 2 19:53:50.451000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:53:50.452000 audit: BPF prog-id=13 op=LOAD Oct 2 19:53:50.457000 audit: BPF prog-id=14 op=LOAD Oct 2 19:53:50.457000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:53:50.457000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:53:50.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.475000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:53:50.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.766000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.781000 audit: BPF prog-id=15 op=LOAD Oct 2 19:53:50.782000 audit: BPF prog-id=16 op=LOAD Oct 2 19:53:50.782000 audit: BPF prog-id=17 op=LOAD Oct 2 19:53:50.782000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:53:50.782000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:53:50.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.970792 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:53:50.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.915000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.943000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:53:50.943000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffcf432a540 a2=4000 a3=7ffcf432a5dc items=0 ppid=1 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:50.943000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:53:45.581583 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:50.450047 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:53:50.976958 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:53:45.583199 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:53:50.461941 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:53:51.006619 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:53:51.006712 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:53:51.006740 systemd[1]: Started systemd-journald.service. Oct 2 19:53:51.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:45.583231 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:53:51.004303 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:53:45.583281 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:53:45.583299 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:53:45.583351 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:53:45.583374 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:53:51.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:45.583707 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:53:51.011967 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:53:45.583768 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:53:51.016186 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:53:45.583787 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:53:51.019877 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:53:45.586492 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:53:51.025306 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:53:45.586555 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:53:45.586586 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:53:51.037875 systemd-journald[1399]: Time spent on flushing to /var/log/journal/ec2b2caa2c10825d3d76ac02e7d89882 is 73.311ms for 1203 entries. Oct 2 19:53:51.037875 systemd-journald[1399]: System Journal (/var/log/journal/ec2b2caa2c10825d3d76ac02e7d89882) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:53:51.143637 systemd-journald[1399]: Received client request to flush runtime journal. Oct 2 19:53:51.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:45.586610 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:53:51.050949 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:53:45.586638 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:53:51.054186 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:53:45.586803 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:45Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:53:51.065562 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:53:49.619921 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:49Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:51.144753 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:53:49.620192 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:49Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:49.620308 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:49Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:49.624716 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:49Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:49.624797 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:49Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:53:49.624870 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T19:53:49Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:53:51.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.156000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.155688 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:53:51.162479 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:53:51.178490 udevadm[1439]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:53:51.188342 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:53:51.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.191957 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:53:51.289476 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:53:51.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.091976 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:53:52.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.092000 audit: BPF prog-id=18 op=LOAD Oct 2 19:53:52.092000 audit: BPF prog-id=19 op=LOAD Oct 2 19:53:52.092000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:53:52.092000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:53:52.095167 systemd[1]: Starting systemd-udevd.service... Oct 2 19:53:52.133713 systemd-udevd[1442]: Using default interface naming scheme 'v252'. Oct 2 19:53:52.220829 systemd[1]: Started systemd-udevd.service. Oct 2 19:53:52.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.223000 audit: BPF prog-id=20 op=LOAD Oct 2 19:53:52.226049 systemd[1]: Starting systemd-networkd.service... Oct 2 19:53:52.256000 audit: BPF prog-id=21 op=LOAD Oct 2 19:53:52.256000 audit: BPF prog-id=22 op=LOAD Oct 2 19:53:52.256000 audit: BPF prog-id=23 op=LOAD Oct 2 19:53:52.259055 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:53:52.356862 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:53:52.365186 (udev-worker)[1456]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:53:52.370047 systemd[1]: Started systemd-userdbd.service. Oct 2 19:53:52.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.506468 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 19:53:52.511491 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:53:52.515949 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 Oct 2 19:53:52.541486 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 19:53:52.501000 audit[1453]: AVC avc: denied { confidentiality } for pid=1453 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:53:52.543632 systemd-networkd[1451]: lo: Link UP Oct 2 19:53:52.543640 systemd-networkd[1451]: lo: Gained carrier Oct 2 19:53:52.544234 systemd-networkd[1451]: Enumeration completed Oct 2 19:53:52.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.544353 systemd[1]: Started systemd-networkd.service. Oct 2 19:53:52.545414 systemd-networkd[1451]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:53:52.547578 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:53:52.552462 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:53:52.553424 systemd-networkd[1451]: eth0: Link UP Oct 2 19:53:52.553619 systemd-networkd[1451]: eth0: Gained carrier Oct 2 19:53:52.564677 systemd-networkd[1451]: eth0: DHCPv4 address 172.31.29.37/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:53:52.501000 audit[1453]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55a973a06140 a1=32194 a2=7feacbc99bc5 a3=5 items=106 ppid=1442 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.501000 audit: CWD cwd="/" Oct 2 19:53:52.501000 audit: PATH item=0 name=(null) inode=14237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=1 name=(null) inode=14238 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=2 name=(null) inode=14237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=3 name=(null) inode=14239 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=4 name=(null) inode=14237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=5 name=(null) inode=14240 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=6 name=(null) inode=14240 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=7 name=(null) inode=14241 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=8 name=(null) inode=14240 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=9 name=(null) inode=14242 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=10 name=(null) inode=14240 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=11 name=(null) inode=14243 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=12 name=(null) inode=14240 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=13 name=(null) inode=14244 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=14 name=(null) inode=14240 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=15 name=(null) inode=14245 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=16 name=(null) inode=14237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=17 name=(null) inode=14246 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=18 name=(null) inode=14246 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=19 name=(null) inode=14247 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=20 name=(null) inode=14246 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=21 name=(null) inode=14248 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=22 name=(null) inode=14246 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=23 name=(null) inode=14249 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=24 name=(null) inode=14246 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=25 name=(null) inode=14250 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=26 name=(null) inode=14246 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=27 name=(null) inode=14251 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=28 name=(null) inode=14237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=29 name=(null) inode=14252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=30 name=(null) inode=14252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=31 name=(null) inode=14253 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=32 name=(null) inode=14252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=33 name=(null) inode=14254 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=34 name=(null) inode=14252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=35 name=(null) inode=14255 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=36 name=(null) inode=14252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=37 name=(null) inode=14256 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=38 name=(null) inode=14252 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=39 name=(null) inode=14263 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=40 name=(null) inode=14237 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=41 name=(null) inode=14284 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=42 name=(null) inode=14284 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=43 name=(null) inode=14285 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=44 name=(null) inode=14284 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=45 name=(null) inode=14286 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=46 name=(null) inode=14284 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=47 name=(null) inode=14287 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=48 name=(null) inode=14284 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=49 name=(null) inode=14288 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=50 name=(null) inode=14284 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=51 name=(null) inode=14289 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=52 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=53 name=(null) inode=14290 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=54 name=(null) inode=14290 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=55 name=(null) inode=14291 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=56 name=(null) inode=14290 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=57 name=(null) inode=14292 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=58 name=(null) inode=14290 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=59 name=(null) inode=14293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=60 name=(null) inode=14293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=61 name=(null) inode=14294 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=62 name=(null) inode=14293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=63 name=(null) inode=14295 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=64 name=(null) inode=14293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=65 name=(null) inode=14296 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=66 name=(null) inode=14293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=67 name=(null) inode=14297 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=68 name=(null) inode=14293 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=69 name=(null) inode=14298 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=70 name=(null) inode=14290 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=71 name=(null) inode=14299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=72 name=(null) inode=14299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=73 name=(null) inode=14300 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=74 name=(null) inode=14299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=75 name=(null) inode=14301 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=76 name=(null) inode=14299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=77 name=(null) inode=14302 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=78 name=(null) inode=14299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=79 name=(null) inode=14303 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=80 name=(null) inode=14299 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=81 name=(null) inode=14304 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=82 name=(null) inode=14290 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=83 name=(null) inode=14305 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=84 name=(null) inode=14305 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=85 name=(null) inode=14306 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=86 name=(null) inode=14305 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=87 name=(null) inode=14307 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=88 name=(null) inode=14305 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=89 name=(null) inode=14308 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=90 name=(null) inode=14305 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=91 name=(null) inode=14309 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=92 name=(null) inode=14305 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=93 name=(null) inode=14310 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=94 name=(null) inode=14290 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=95 name=(null) inode=14311 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=96 name=(null) inode=14311 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=97 name=(null) inode=14312 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=98 name=(null) inode=14311 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=99 name=(null) inode=14313 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=100 name=(null) inode=14311 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=101 name=(null) inode=14314 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=102 name=(null) inode=14311 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=103 name=(null) inode=14315 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=104 name=(null) inode=14311 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PATH item=105 name=(null) inode=14316 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:52.501000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:53:52.643502 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1457) Oct 2 19:53:52.648883 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 19:53:52.695738 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input5 Oct 2 19:53:52.706488 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:53:52.800224 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:53:52.931892 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:53:52.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.934765 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:53:52.988562 lvm[1556]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:53:53.029007 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:53:53.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.030595 systemd[1]: Reached target cryptsetup.target. Oct 2 19:53:53.033744 systemd[1]: Starting lvm2-activation.service... Oct 2 19:53:53.040666 lvm[1557]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:53:53.076564 systemd[1]: Finished lvm2-activation.service. Oct 2 19:53:53.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.077972 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:53:53.079197 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:53:53.079305 systemd[1]: Reached target local-fs.target. Oct 2 19:53:53.080587 systemd[1]: Reached target machines.target. Oct 2 19:53:53.083084 systemd[1]: Starting ldconfig.service... Oct 2 19:53:53.085021 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:53:53.085096 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:53:53.086497 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:53:53.088940 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:53:53.092206 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:53:53.093781 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:53:53.093873 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:53:53.095779 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:53:53.124513 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1559 (bootctl) Oct 2 19:53:53.127356 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:53:53.163641 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:53:53.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.165751 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:53:53.166205 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:53:53.169412 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:53:53.387305 systemd-fsck[1567]: fsck.fat 4.2 (2021-01-31) Oct 2 19:53:53.387305 systemd-fsck[1567]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 19:53:53.389168 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:53:53.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.392381 systemd[1]: Mounting boot.mount... Oct 2 19:53:53.418108 systemd[1]: Mounted boot.mount. Oct 2 19:53:53.474891 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:53:53.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.660794 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:53:53.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.663843 systemd[1]: Starting audit-rules.service... Oct 2 19:53:53.668288 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:53:53.674018 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:53:53.676000 audit: BPF prog-id=24 op=LOAD Oct 2 19:53:53.687000 audit: BPF prog-id=25 op=LOAD Oct 2 19:53:53.684212 systemd[1]: Starting systemd-resolved.service... Oct 2 19:53:53.689981 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:53:53.696095 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:53:53.743000 audit[1587]: SYSTEM_BOOT pid=1587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.746297 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:53:53.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.771055 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:53:53.773259 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:53:53.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.884750 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:53:53.887817 systemd[1]: Reached target time-set.target. Oct 2 19:53:53.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:53.971550 systemd-resolved[1585]: Positive Trust Anchors: Oct 2 19:53:53.971722 systemd-resolved[1585]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:53:53.971776 systemd-resolved[1585]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:53:54.025507 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:53:54.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:54.058013 systemd-resolved[1585]: Defaulting to hostname 'linux'. Oct 2 19:53:54.059929 systemd[1]: Started systemd-resolved.service. Oct 2 19:53:54.061138 systemd[1]: Reached target network.target. Oct 2 19:53:54.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:54.062355 systemd[1]: Reached target nss-lookup.target. Oct 2 19:53:54.081239 augenrules[1603]: No rules Oct 2 19:53:54.079000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:53:54.079000 audit[1603]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc648df4c0 a2=420 a3=0 items=0 ppid=1582 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:54.079000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:53:54.082683 systemd[1]: Finished audit-rules.service. Oct 2 19:53:54.140889 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:53:54.141951 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:53:55.049038 systemd-resolved[1585]: Clock change detected. Flushing caches. Oct 2 19:53:55.049136 systemd-timesyncd[1586]: Contacted time server 157.245.125.229:123 (0.flatcar.pool.ntp.org). Oct 2 19:53:55.049333 systemd-timesyncd[1586]: Initial clock synchronization to Mon 2023-10-02 19:53:55.048975 UTC. Oct 2 19:53:55.319229 systemd-networkd[1451]: eth0: Gained IPv6LL Oct 2 19:53:55.321468 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:53:55.322960 systemd[1]: Reached target network-online.target. Oct 2 19:53:55.407370 ldconfig[1558]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:53:55.413426 systemd[1]: Finished ldconfig.service. Oct 2 19:53:55.416235 systemd[1]: Starting systemd-update-done.service... Oct 2 19:53:55.427770 systemd[1]: Finished systemd-update-done.service. Oct 2 19:53:55.429426 systemd[1]: Reached target sysinit.target. Oct 2 19:53:55.430713 systemd[1]: Started motdgen.path. Oct 2 19:53:55.431828 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:53:55.433497 systemd[1]: Started logrotate.timer. Oct 2 19:53:55.434902 systemd[1]: Started mdadm.timer. Oct 2 19:53:55.435890 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:53:55.437194 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:53:55.437246 systemd[1]: Reached target paths.target. Oct 2 19:53:55.438288 systemd[1]: Reached target timers.target. Oct 2 19:53:55.439538 systemd[1]: Listening on dbus.socket. Oct 2 19:53:55.441989 systemd[1]: Starting docker.socket... Oct 2 19:53:55.449586 systemd[1]: Listening on sshd.socket. Oct 2 19:53:55.451026 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:53:55.451687 systemd[1]: Listening on docker.socket. Oct 2 19:53:55.452890 systemd[1]: Reached target sockets.target. Oct 2 19:53:55.454289 systemd[1]: Reached target basic.target. Oct 2 19:53:55.455853 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:53:55.455902 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:53:55.459014 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:53:55.471151 systemd[1]: Starting containerd.service... Oct 2 19:53:55.475100 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:53:55.484670 systemd[1]: Starting dbus.service... Oct 2 19:53:55.488699 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:53:55.495612 systemd[1]: Starting extend-filesystems.service... Oct 2 19:53:55.497681 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:53:55.501180 systemd[1]: Starting motdgen.service... Oct 2 19:53:55.511377 systemd[1]: Started nvidia.service. Oct 2 19:53:55.525514 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:53:55.538689 systemd[1]: Starting prepare-critools.service... Oct 2 19:53:55.543447 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:53:55.551023 systemd[1]: Starting sshd-keygen.service... Oct 2 19:53:55.557153 systemd[1]: Starting systemd-logind.service... Oct 2 19:53:55.559281 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:53:55.559355 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:53:55.560220 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:53:55.561387 systemd[1]: Starting update-engine.service... Oct 2 19:53:55.566107 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:53:55.612371 jq[1626]: true Oct 2 19:53:55.619937 jq[1616]: false Oct 2 19:53:55.614813 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:53:55.615032 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:53:55.655802 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:53:55.656036 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:53:55.754081 tar[1628]: ./ Oct 2 19:53:55.754081 tar[1628]: ./macvlan Oct 2 19:53:55.800443 tar[1629]: crictl Oct 2 19:53:55.810996 dbus-daemon[1615]: [system] SELinux support is enabled Oct 2 19:53:55.811254 systemd[1]: Started dbus.service. Oct 2 19:53:55.820600 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:53:55.820646 systemd[1]: Reached target system-config.target. Oct 2 19:53:55.835571 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:53:55.835617 systemd[1]: Reached target user-config.target. Oct 2 19:53:55.838393 jq[1630]: true Oct 2 19:53:55.893144 dbus-daemon[1615]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1451 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:53:55.902580 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:53:55.932883 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:53:55.933327 systemd[1]: Finished motdgen.service. Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1 Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1p1 Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1p2 Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1p3 Oct 2 19:53:55.967238 extend-filesystems[1617]: Found usr Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1p4 Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1p6 Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1p7 Oct 2 19:53:55.967238 extend-filesystems[1617]: Found nvme0n1p9 Oct 2 19:53:55.967238 extend-filesystems[1617]: Checking size of /dev/nvme0n1p9 Oct 2 19:53:56.023129 env[1631]: time="2023-10-02T19:53:56.022931980Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:53:56.024532 amazon-ssm-agent[1612]: 2023/10/02 19:53:56 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:53:56.034819 amazon-ssm-agent[1612]: Initializing new seelog logger Oct 2 19:53:56.034995 amazon-ssm-agent[1612]: New Seelog Logger Creation Complete Oct 2 19:53:56.035093 amazon-ssm-agent[1612]: 2023/10/02 19:53:56 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:53:56.035093 amazon-ssm-agent[1612]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:53:56.035362 amazon-ssm-agent[1612]: 2023/10/02 19:53:56 processing appconfig overrides Oct 2 19:53:56.077561 bash[1680]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:53:56.077930 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:53:56.090953 update_engine[1625]: I1002 19:53:56.090111 1625 main.cc:92] Flatcar Update Engine starting Oct 2 19:53:56.093884 extend-filesystems[1617]: Resized partition /dev/nvme0n1p9 Oct 2 19:53:56.099383 systemd[1]: Started update-engine.service. Oct 2 19:53:56.100203 update_engine[1625]: I1002 19:53:56.100040 1625 update_check_scheduler.cc:74] Next update check in 2m11s Oct 2 19:53:56.104787 systemd[1]: Started locksmithd.service. Oct 2 19:53:56.129406 extend-filesystems[1688]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:53:56.152072 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:53:56.243118 systemd-logind[1624]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:53:56.243757 systemd-logind[1624]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 19:53:56.244094 systemd-logind[1624]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:53:56.245292 systemd-logind[1624]: New seat seat0. Oct 2 19:53:56.251186 systemd[1]: Started systemd-logind.service. Oct 2 19:53:56.263623 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:53:56.320971 extend-filesystems[1688]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:53:56.320971 extend-filesystems[1688]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:53:56.320971 extend-filesystems[1688]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:53:56.326950 extend-filesystems[1617]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:53:56.325163 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:53:56.328285 systemd[1]: Finished extend-filesystems.service. Oct 2 19:53:56.338195 tar[1628]: ./static Oct 2 19:53:56.367404 env[1631]: time="2023-10-02T19:53:56.367350160Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:53:56.377128 env[1631]: time="2023-10-02T19:53:56.377084733Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:56.386511 env[1631]: time="2023-10-02T19:53:56.386449789Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:53:56.392551 env[1631]: time="2023-10-02T19:53:56.392483342Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:56.402884 env[1631]: time="2023-10-02T19:53:56.402828874Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:53:56.402884 env[1631]: time="2023-10-02T19:53:56.402880720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:56.403090 env[1631]: time="2023-10-02T19:53:56.402900983Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:53:56.403090 env[1631]: time="2023-10-02T19:53:56.402916625Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:56.403090 env[1631]: time="2023-10-02T19:53:56.403033385Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:56.403445 env[1631]: time="2023-10-02T19:53:56.403418098Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:56.404181 env[1631]: time="2023-10-02T19:53:56.404142122Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:53:56.404328 env[1631]: time="2023-10-02T19:53:56.404181683Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:53:56.404328 env[1631]: time="2023-10-02T19:53:56.404317960Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:53:56.404607 env[1631]: time="2023-10-02T19:53:56.404336990Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:53:56.411064 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:53:56.419365 env[1631]: time="2023-10-02T19:53:56.419313914Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419374983Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419393255Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419434017Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419455475Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419473501Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419546079Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419567512Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419592 env[1631]: time="2023-10-02T19:53:56.419587800Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419964 env[1631]: time="2023-10-02T19:53:56.419613472Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419964 env[1631]: time="2023-10-02T19:53:56.419630933Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.419964 env[1631]: time="2023-10-02T19:53:56.419663089Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:53:56.419964 env[1631]: time="2023-10-02T19:53:56.419829555Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:53:56.419964 env[1631]: time="2023-10-02T19:53:56.419935991Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420343970Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420389179Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420416769Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420478675Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420497646Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420515068Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420532063Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420549056Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420565712Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420582203Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420599934Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420618203Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420776581Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420796710Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422098 env[1631]: time="2023-10-02T19:53:56.420813406Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.422843 env[1631]: time="2023-10-02T19:53:56.420831154Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:53:56.422843 env[1631]: time="2023-10-02T19:53:56.420856329Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:53:56.422843 env[1631]: time="2023-10-02T19:53:56.420874300Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:53:56.422843 env[1631]: time="2023-10-02T19:53:56.420959508Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:53:56.422843 env[1631]: time="2023-10-02T19:53:56.421010898Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:53:56.423265 env[1631]: time="2023-10-02T19:53:56.421380790Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:53:56.423265 env[1631]: time="2023-10-02T19:53:56.421462422Z" level=info msg="Connect containerd service" Oct 2 19:53:56.423265 env[1631]: time="2023-10-02T19:53:56.421515075Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:53:56.428470 env[1631]: time="2023-10-02T19:53:56.423741013Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:53:56.428657 env[1631]: time="2023-10-02T19:53:56.428618439Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:53:56.428777 env[1631]: time="2023-10-02T19:53:56.428762779Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:53:56.428899 env[1631]: time="2023-10-02T19:53:56.428885833Z" level=info msg="containerd successfully booted in 0.417297s" Oct 2 19:53:56.428993 systemd[1]: Started containerd.service. Oct 2 19:53:56.430271 env[1631]: time="2023-10-02T19:53:56.429174632Z" level=info msg="Start subscribing containerd event" Oct 2 19:53:56.430437 env[1631]: time="2023-10-02T19:53:56.430417646Z" level=info msg="Start recovering state" Oct 2 19:53:56.430591 env[1631]: time="2023-10-02T19:53:56.430574754Z" level=info msg="Start event monitor" Oct 2 19:53:56.430672 env[1631]: time="2023-10-02T19:53:56.430659212Z" level=info msg="Start snapshots syncer" Oct 2 19:53:56.430744 env[1631]: time="2023-10-02T19:53:56.430730139Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:53:56.430875 env[1631]: time="2023-10-02T19:53:56.430859418Z" level=info msg="Start streaming server" Oct 2 19:53:56.433662 dbus-daemon[1615]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:53:56.433839 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:53:56.440776 systemd[1]: Starting polkit.service... Oct 2 19:53:56.435104 dbus-daemon[1615]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1661 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:53:56.498056 polkitd[1705]: Started polkitd version 121 Oct 2 19:53:56.529480 polkitd[1705]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:53:56.529571 polkitd[1705]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:53:56.537708 polkitd[1705]: Finished loading, compiling and executing 2 rules Oct 2 19:53:56.545151 dbus-daemon[1615]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:53:56.545403 systemd[1]: Started polkit.service. Oct 2 19:53:56.549952 polkitd[1705]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:53:56.579636 tar[1628]: ./vlan Oct 2 19:53:56.590703 systemd-resolved[1585]: System hostname changed to 'ip-172-31-29-37'. Oct 2 19:53:56.590708 systemd-hostnamed[1661]: Hostname set to (transient) Oct 2 19:53:56.789000 tar[1628]: ./portmap Oct 2 19:53:56.826339 coreos-metadata[1614]: Oct 02 19:53:56.820 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:53:56.830407 coreos-metadata[1614]: Oct 02 19:53:56.830 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:53:56.831269 coreos-metadata[1614]: Oct 02 19:53:56.831 INFO Fetch successful Oct 2 19:53:56.831473 coreos-metadata[1614]: Oct 02 19:53:56.831 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:53:56.832532 coreos-metadata[1614]: Oct 02 19:53:56.832 INFO Fetch successful Oct 2 19:53:56.835990 unknown[1614]: wrote ssh authorized keys file for user: core Oct 2 19:53:56.856578 amazon-ssm-agent[1612]: 2023-10-02 19:53:56 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:53:56.856759 amazon-ssm-agent[1612]: 2023-10-02 19:53:56 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0606a681ad7a1c90e is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0606a681ad7a1c90e because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:53:56.856759 amazon-ssm-agent[1612]: status code: 400, request id: 2e38a382-3b97-45f4-9e1b-cc48cae6e4b7 Oct 2 19:53:56.869592 update-ssh-keys[1768]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:53:56.870742 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:53:56.938723 tar[1628]: ./host-local Oct 2 19:53:57.077234 tar[1628]: ./vrf Oct 2 19:53:57.185915 tar[1628]: ./bridge Oct 2 19:53:57.288093 tar[1628]: ./tuning Oct 2 19:53:57.341942 tar[1628]: ./firewall Oct 2 19:53:57.436695 tar[1628]: ./host-device Oct 2 19:53:57.527850 tar[1628]: ./sbr Oct 2 19:53:57.577097 tar[1628]: ./loopback Oct 2 19:53:57.625653 tar[1628]: ./dhcp Oct 2 19:53:57.842318 systemd[1]: Finished prepare-critools.service. Oct 2 19:53:57.871020 tar[1628]: ./ptp Oct 2 19:53:57.965813 tar[1628]: ./ipvlan Oct 2 19:53:58.031329 tar[1628]: ./bandwidth Oct 2 19:53:58.104246 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:53:58.226122 locksmithd[1687]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:53:58.902219 sshd_keygen[1654]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:53:58.932951 systemd[1]: Finished sshd-keygen.service. Oct 2 19:53:58.935924 systemd[1]: Starting issuegen.service... Oct 2 19:53:58.948919 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:53:58.949289 systemd[1]: Finished issuegen.service. Oct 2 19:53:58.952702 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:53:58.963485 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:53:58.970938 systemd[1]: Started getty@tty1.service. Oct 2 19:53:58.976378 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:53:58.977964 systemd[1]: Reached target getty.target. Oct 2 19:53:58.979632 systemd[1]: Reached target multi-user.target. Oct 2 19:53:58.982888 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:53:58.993628 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:53:58.994760 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:53:58.996874 systemd[1]: Startup finished in 1.061s (kernel) + 13.180s (initrd) + 13.059s (userspace) = 27.300s. Oct 2 19:54:05.096590 systemd[1]: Created slice system-sshd.slice. Oct 2 19:54:05.098250 systemd[1]: Started sshd@0-172.31.29.37:22-139.178.89.65:41150.service. Oct 2 19:54:05.298458 sshd[1823]: Accepted publickey for core from 139.178.89.65 port 41150 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:05.303025 sshd[1823]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:05.338369 systemd[1]: Created slice user-500.slice. Oct 2 19:54:05.345272 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:54:05.349580 systemd-logind[1624]: New session 1 of user core. Oct 2 19:54:05.360982 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:54:05.365639 systemd[1]: Starting user@500.service... Oct 2 19:54:05.372904 (systemd)[1826]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:05.580868 systemd[1826]: Queued start job for default target default.target. Oct 2 19:54:05.581555 systemd[1826]: Reached target paths.target. Oct 2 19:54:05.581589 systemd[1826]: Reached target sockets.target. Oct 2 19:54:05.581608 systemd[1826]: Reached target timers.target. Oct 2 19:54:05.581626 systemd[1826]: Reached target basic.target. Oct 2 19:54:05.581686 systemd[1826]: Reached target default.target. Oct 2 19:54:05.581727 systemd[1826]: Startup finished in 199ms. Oct 2 19:54:05.582279 systemd[1]: Started user@500.service. Oct 2 19:54:05.585019 systemd[1]: Started session-1.scope. Oct 2 19:54:05.761944 systemd[1]: Started sshd@1-172.31.29.37:22-139.178.89.65:43756.service. Oct 2 19:54:05.936628 sshd[1835]: Accepted publickey for core from 139.178.89.65 port 43756 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:05.938293 sshd[1835]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:05.943439 systemd-logind[1624]: New session 2 of user core. Oct 2 19:54:05.944158 systemd[1]: Started session-2.scope. Oct 2 19:54:06.075824 sshd[1835]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:06.079494 systemd[1]: sshd@1-172.31.29.37:22-139.178.89.65:43756.service: Deactivated successfully. Oct 2 19:54:06.080550 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:54:06.081275 systemd-logind[1624]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:54:06.082804 systemd-logind[1624]: Removed session 2. Oct 2 19:54:06.100965 systemd[1]: Started sshd@2-172.31.29.37:22-139.178.89.65:43764.service. Oct 2 19:54:06.269294 sshd[1841]: Accepted publickey for core from 139.178.89.65 port 43764 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:06.271090 sshd[1841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:06.277890 systemd-logind[1624]: New session 3 of user core. Oct 2 19:54:06.278681 systemd[1]: Started session-3.scope. Oct 2 19:54:06.397690 sshd[1841]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:06.402964 systemd[1]: sshd@2-172.31.29.37:22-139.178.89.65:43764.service: Deactivated successfully. Oct 2 19:54:06.403943 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:54:06.404670 systemd-logind[1624]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:54:06.406999 systemd-logind[1624]: Removed session 3. Oct 2 19:54:06.429157 systemd[1]: Started sshd@3-172.31.29.37:22-139.178.89.65:43778.service. Oct 2 19:54:06.617823 sshd[1847]: Accepted publickey for core from 139.178.89.65 port 43778 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:06.619834 sshd[1847]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:06.628582 systemd[1]: Started session-4.scope. Oct 2 19:54:06.629444 systemd-logind[1624]: New session 4 of user core. Oct 2 19:54:06.764519 sshd[1847]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:06.774288 systemd[1]: sshd@3-172.31.29.37:22-139.178.89.65:43778.service: Deactivated successfully. Oct 2 19:54:06.775308 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:54:06.776133 systemd-logind[1624]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:54:06.778493 systemd-logind[1624]: Removed session 4. Oct 2 19:54:06.796548 systemd[1]: Started sshd@4-172.31.29.37:22-139.178.89.65:43794.service. Oct 2 19:54:06.976926 sshd[1853]: Accepted publickey for core from 139.178.89.65 port 43794 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:06.978781 sshd[1853]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:06.995352 systemd-logind[1624]: New session 5 of user core. Oct 2 19:54:06.995988 systemd[1]: Started session-5.scope. Oct 2 19:54:07.132081 sudo[1856]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:54:07.132573 sudo[1856]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:07.144317 dbus-daemon[1615]: \xd0M[\u001f\xebU: received setenforce notice (enforcing=887650064) Oct 2 19:54:07.146851 sudo[1856]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:07.171445 sshd[1853]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:07.176092 systemd[1]: sshd@4-172.31.29.37:22-139.178.89.65:43794.service: Deactivated successfully. Oct 2 19:54:07.178425 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:54:07.179372 systemd-logind[1624]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:54:07.182500 systemd-logind[1624]: Removed session 5. Oct 2 19:54:07.201279 systemd[1]: Started sshd@5-172.31.29.37:22-139.178.89.65:43806.service. Oct 2 19:54:07.373946 sshd[1860]: Accepted publickey for core from 139.178.89.65 port 43806 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:07.376869 sshd[1860]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:07.383122 systemd-logind[1624]: New session 6 of user core. Oct 2 19:54:07.384932 systemd[1]: Started session-6.scope. Oct 2 19:54:07.504029 sudo[1864]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:54:07.504514 sudo[1864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:07.514408 sudo[1864]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:07.524039 sudo[1863]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:54:07.524438 sudo[1863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:07.535954 systemd[1]: Stopping audit-rules.service... Oct 2 19:54:07.540072 kernel: kauditd_printk_skb: 177 callbacks suppressed Oct 2 19:54:07.540263 kernel: audit: type=1305 audit(1696276447.536:160): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:07.536000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:07.542076 kernel: audit: type=1300 audit(1696276447.536:160): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff4761c980 a2=420 a3=0 items=0 ppid=1 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:07.536000 audit[1867]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff4761c980 a2=420 a3=0 items=0 ppid=1 pid=1867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:07.543311 auditctl[1867]: No rules Oct 2 19:54:07.536000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:07.543931 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:54:07.544217 systemd[1]: Stopped audit-rules.service. Oct 2 19:54:07.546353 systemd[1]: Starting audit-rules.service... Oct 2 19:54:07.551608 kernel: audit: type=1327 audit(1696276447.536:160): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:07.551685 kernel: audit: type=1131 audit(1696276447.543:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.543000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.571122 augenrules[1884]: No rules Oct 2 19:54:07.572702 systemd[1]: Finished audit-rules.service. Oct 2 19:54:07.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.573748 sudo[1863]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:07.572000 audit[1863]: USER_END pid=1863 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.584464 kernel: audit: type=1130 audit(1696276447.571:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.584532 kernel: audit: type=1106 audit(1696276447.572:163): pid=1863 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.584568 kernel: audit: type=1104 audit(1696276447.572:164): pid=1863 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.572000 audit[1863]: CRED_DISP pid=1863 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.597548 sshd[1860]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:07.597000 audit[1860]: USER_END pid=1860 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.600515 systemd[1]: sshd@5-172.31.29.37:22-139.178.89.65:43806.service: Deactivated successfully. Oct 2 19:54:07.601552 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:54:07.603679 systemd-logind[1624]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:54:07.605083 systemd-logind[1624]: Removed session 6. Oct 2 19:54:07.597000 audit[1860]: CRED_DISP pid=1860 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.611299 kernel: audit: type=1106 audit(1696276447.597:165): pid=1860 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.611409 kernel: audit: type=1104 audit(1696276447.597:166): pid=1860 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.611440 kernel: audit: type=1131 audit(1696276447.599:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.37:22-139.178.89.65:43806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.29.37:22-139.178.89.65:43806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.623734 systemd[1]: Started sshd@6-172.31.29.37:22-139.178.89.65:43822.service. Oct 2 19:54:07.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.37:22-139.178.89.65:43822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.788000 audit[1890]: USER_ACCT pid=1890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.789351 sshd[1890]: Accepted publickey for core from 139.178.89.65 port 43822 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:07.790000 audit[1890]: CRED_ACQ pid=1890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.790000 audit[1890]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff64862290 a2=3 a3=0 items=0 ppid=1 pid=1890 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:07.790000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:54:07.792118 sshd[1890]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:07.800355 systemd[1]: Started session-7.scope. Oct 2 19:54:07.801159 systemd-logind[1624]: New session 7 of user core. Oct 2 19:54:07.806000 audit[1890]: USER_START pid=1890 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.810000 audit[1892]: CRED_ACQ pid=1892 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:07.906000 audit[1893]: USER_ACCT pid=1893 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.907262 sudo[1893]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:54:07.906000 audit[1893]: CRED_REFR pid=1893 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.907573 sudo[1893]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:07.910000 audit[1893]: USER_START pid=1893 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:08.558674 systemd[1]: Starting docker.service... Oct 2 19:54:08.616863 env[1908]: time="2023-10-02T19:54:08.616808425Z" level=info msg="Starting up" Oct 2 19:54:08.619207 env[1908]: time="2023-10-02T19:54:08.619169745Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:08.619207 env[1908]: time="2023-10-02T19:54:08.619194159Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:08.619377 env[1908]: time="2023-10-02T19:54:08.619218564Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:54:08.619377 env[1908]: time="2023-10-02T19:54:08.619232792Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:08.621157 env[1908]: time="2023-10-02T19:54:08.621124425Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:08.621157 env[1908]: time="2023-10-02T19:54:08.621145534Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:08.621294 env[1908]: time="2023-10-02T19:54:08.621164420Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:54:08.621294 env[1908]: time="2023-10-02T19:54:08.621176667Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:08.628859 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1563930746-merged.mount: Deactivated successfully. Oct 2 19:54:08.690883 env[1908]: time="2023-10-02T19:54:08.690834754Z" level=info msg="Loading containers: start." Oct 2 19:54:08.766000 audit[1938]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1938 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.766000 audit[1938]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe56441180 a2=0 a3=7ffe5644116c items=0 ppid=1908 pid=1938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.766000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:54:08.769000 audit[1940]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1940 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.769000 audit[1940]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdcccfe490 a2=0 a3=7ffdcccfe47c items=0 ppid=1908 pid=1940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.769000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:54:08.773000 audit[1942]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.773000 audit[1942]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcd51e5ad0 a2=0 a3=7ffcd51e5abc items=0 ppid=1908 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.773000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:08.776000 audit[1944]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.776000 audit[1944]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe6ca76590 a2=0 a3=7ffe6ca7657c items=0 ppid=1908 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.776000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:08.779000 audit[1946]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.779000 audit[1946]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc63a2a730 a2=0 a3=7ffc63a2a71c items=0 ppid=1908 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.779000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:54:08.799000 audit[1951]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1951 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.799000 audit[1951]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff463381c0 a2=0 a3=7fff463381ac items=0 ppid=1908 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.799000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:54:08.811000 audit[1953]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1953 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.811000 audit[1953]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe25423c20 a2=0 a3=7ffe25423c0c items=0 ppid=1908 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.811000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:54:08.815000 audit[1955]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.815000 audit[1955]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffeac12ef20 a2=0 a3=7ffeac12ef0c items=0 ppid=1908 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.815000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:54:08.817000 audit[1957]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.817000 audit[1957]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffcadfbe5a0 a2=0 a3=7ffcadfbe58c items=0 ppid=1908 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.817000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:08.832000 audit[1961]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.832000 audit[1961]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcee8d3410 a2=0 a3=7ffcee8d33fc items=0 ppid=1908 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.832000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:08.834000 audit[1962]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1962 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.834000 audit[1962]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe71412c70 a2=0 a3=7ffe71412c5c items=0 ppid=1908 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.834000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:08.845091 kernel: Initializing XFRM netlink socket Oct 2 19:54:08.896210 env[1908]: time="2023-10-02T19:54:08.896157167Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:54:08.897824 (udev-worker)[1918]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:54:08.967000 audit[1970]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1970 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:08.967000 audit[1970]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fffcf482570 a2=0 a3=7fffcf48255c items=0 ppid=1908 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:08.967000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:54:09.124000 audit[1973]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1973 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.124000 audit[1973]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffc1a570d0 a2=0 a3=7fffc1a570bc items=0 ppid=1908 pid=1973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.124000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:54:09.139000 audit[1976]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.139000 audit[1976]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffff47d5630 a2=0 a3=7ffff47d561c items=0 ppid=1908 pid=1976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.139000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:09.142000 audit[1978]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.142000 audit[1978]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc7114a540 a2=0 a3=7ffc7114a52c items=0 ppid=1908 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.142000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:09.147000 audit[1980]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.147000 audit[1980]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe2dd1c990 a2=0 a3=7ffe2dd1c97c items=0 ppid=1908 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.147000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:54:09.150000 audit[1982]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.150000 audit[1982]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd99764480 a2=0 a3=7ffd9976446c items=0 ppid=1908 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.150000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:54:09.154000 audit[1984]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.154000 audit[1984]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcc3e44bc0 a2=0 a3=7ffcc3e44bac items=0 ppid=1908 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.154000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:54:09.165000 audit[1987]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.165000 audit[1987]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe1767c1e0 a2=0 a3=7ffe1767c1cc items=0 ppid=1908 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.165000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:54:09.170000 audit[1989]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.170000 audit[1989]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffdc45bbab0 a2=0 a3=7ffdc45bba9c items=0 ppid=1908 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.170000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:09.173000 audit[1991]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.173000 audit[1991]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffeef31d720 a2=0 a3=7ffeef31d70c items=0 ppid=1908 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.173000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:09.176000 audit[1993]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.176000 audit[1993]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff62a85dc0 a2=0 a3=7fff62a85dac items=0 ppid=1908 pid=1993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.176000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:54:09.178386 systemd-networkd[1451]: docker0: Link UP Oct 2 19:54:09.200000 audit[1998]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.200000 audit[1998]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcf02fa180 a2=0 a3=7ffcf02fa16c items=0 ppid=1908 pid=1998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.200000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:09.201000 audit[1999]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:09.201000 audit[1999]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe1c5620e0 a2=0 a3=7ffe1c5620cc items=0 ppid=1908 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:09.201000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:09.203295 env[1908]: time="2023-10-02T19:54:09.203260532Z" level=info msg="Loading containers: done." Oct 2 19:54:09.240149 env[1908]: time="2023-10-02T19:54:09.240098491Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:54:09.240512 env[1908]: time="2023-10-02T19:54:09.240397878Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:54:09.240750 env[1908]: time="2023-10-02T19:54:09.240687877Z" level=info msg="Daemon has completed initialization" Oct 2 19:54:09.281766 systemd[1]: Started docker.service. Oct 2 19:54:09.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:09.304888 env[1908]: time="2023-10-02T19:54:09.304652619Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:54:09.332270 systemd[1]: Reloading. Oct 2 19:54:09.506832 /usr/lib/systemd/system-generators/torcx-generator[2048]: time="2023-10-02T19:54:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:09.511974 /usr/lib/systemd/system-generators/torcx-generator[2048]: time="2023-10-02T19:54:09Z" level=info msg="torcx already run" Oct 2 19:54:09.662188 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:09.662210 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:09.700148 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:09.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.845000 audit: BPF prog-id=34 op=LOAD Oct 2 19:54:09.846000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.849000 audit: BPF prog-id=35 op=LOAD Oct 2 19:54:09.849000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.852000 audit: BPF prog-id=36 op=LOAD Oct 2 19:54:09.852000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.853000 audit: BPF prog-id=37 op=LOAD Oct 2 19:54:09.854000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.855000 audit: BPF prog-id=38 op=LOAD Oct 2 19:54:09.855000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit: BPF prog-id=39 op=LOAD Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.856000 audit: BPF prog-id=40 op=LOAD Oct 2 19:54:09.856000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:54:09.856000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.858000 audit: BPF prog-id=41 op=LOAD Oct 2 19:54:09.858000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit: BPF prog-id=42 op=LOAD Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.859000 audit: BPF prog-id=43 op=LOAD Oct 2 19:54:09.859000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:54:09.859000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:54:09.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit: BPF prog-id=44 op=LOAD Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.860000 audit: BPF prog-id=45 op=LOAD Oct 2 19:54:09.860000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:54:09.860000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit: BPF prog-id=46 op=LOAD Oct 2 19:54:09.862000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit: BPF prog-id=47 op=LOAD Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit: BPF prog-id=48 op=LOAD Oct 2 19:54:09.863000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:54:09.863000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit: BPF prog-id=49 op=LOAD Oct 2 19:54:09.863000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit: BPF prog-id=50 op=LOAD Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:09.864000 audit: BPF prog-id=51 op=LOAD Oct 2 19:54:09.864000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:54:09.864000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:54:09.882032 systemd[1]: Started kubelet.service. Oct 2 19:54:09.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:10.017893 kubelet[2097]: E1002 19:54:10.017830 2097 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:54:10.024916 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:10.025314 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:10.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:10.553327 env[1631]: time="2023-10-02T19:54:10.553149289Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 19:54:11.281777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2566344540.mount: Deactivated successfully. Oct 2 19:54:15.926019 env[1631]: time="2023-10-02T19:54:15.925952425Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:15.932764 env[1631]: time="2023-10-02T19:54:15.932714835Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:15.937574 env[1631]: time="2023-10-02T19:54:15.937528469Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:15.941989 env[1631]: time="2023-10-02T19:54:15.941942274Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:15.944321 env[1631]: time="2023-10-02T19:54:15.944272975Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 19:54:15.969296 env[1631]: time="2023-10-02T19:54:15.969241952Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 19:54:20.268627 env[1631]: time="2023-10-02T19:54:20.268568446Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:20.273446 env[1631]: time="2023-10-02T19:54:20.273388316Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:20.274614 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:54:20.274898 systemd[1]: Stopped kubelet.service. Oct 2 19:54:20.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:20.285078 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:54:20.285200 kernel: audit: type=1130 audit(1696276460.273:410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:20.289425 env[1631]: time="2023-10-02T19:54:20.289375002Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:20.295972 env[1631]: time="2023-10-02T19:54:20.295914734Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:20.298082 env[1631]: time="2023-10-02T19:54:20.298024688Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 19:54:20.301462 systemd[1]: Started kubelet.service. Oct 2 19:54:20.273000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:20.319344 kernel: audit: type=1131 audit(1696276460.273:411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:20.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:20.342070 kernel: audit: type=1130 audit(1696276460.300:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:20.346490 env[1631]: time="2023-10-02T19:54:20.346446719Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 19:54:20.458300 kubelet[2124]: E1002 19:54:20.458253 2124 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:54:20.465625 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:20.465841 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:20.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:20.472249 kernel: audit: type=1131 audit(1696276460.465:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:22.928612 env[1631]: time="2023-10-02T19:54:22.928528117Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.933511 env[1631]: time="2023-10-02T19:54:22.933463992Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.937126 env[1631]: time="2023-10-02T19:54:22.937079129Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.940245 env[1631]: time="2023-10-02T19:54:22.940201197Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.941284 env[1631]: time="2023-10-02T19:54:22.941244746Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 19:54:22.958299 env[1631]: time="2023-10-02T19:54:22.958114253Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 19:54:24.396702 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount873509702.mount: Deactivated successfully. Oct 2 19:54:25.294203 env[1631]: time="2023-10-02T19:54:25.294144809Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.298182 env[1631]: time="2023-10-02T19:54:25.298134220Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.300867 env[1631]: time="2023-10-02T19:54:25.300796683Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.303565 env[1631]: time="2023-10-02T19:54:25.303522974Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.304688 env[1631]: time="2023-10-02T19:54:25.304647055Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 19:54:25.327243 env[1631]: time="2023-10-02T19:54:25.327212925Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:54:25.845305 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1564932417.mount: Deactivated successfully. Oct 2 19:54:25.854827 env[1631]: time="2023-10-02T19:54:25.854725684Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.861318 env[1631]: time="2023-10-02T19:54:25.861269835Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.864598 env[1631]: time="2023-10-02T19:54:25.864551945Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.867616 env[1631]: time="2023-10-02T19:54:25.867568041Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:25.868510 env[1631]: time="2023-10-02T19:54:25.868468860Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:54:25.889930 env[1631]: time="2023-10-02T19:54:25.889890561Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 19:54:26.624511 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:54:26.631193 kernel: audit: type=1131 audit(1696276466.623:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:26.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:26.656226 kernel: audit: type=1334 audit(1696276466.649:415): prog-id=51 op=UNLOAD Oct 2 19:54:26.656355 kernel: audit: type=1334 audit(1696276466.649:416): prog-id=50 op=UNLOAD Oct 2 19:54:26.656406 kernel: audit: type=1334 audit(1696276466.649:417): prog-id=49 op=UNLOAD Oct 2 19:54:26.649000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:54:26.649000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:54:26.649000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:54:27.010259 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1954857406.mount: Deactivated successfully. Oct 2 19:54:30.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:30.529284 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:54:30.559153 kernel: audit: type=1130 audit(1696276470.529:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:30.559259 kernel: audit: type=1131 audit(1696276470.529:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:30.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:30.529569 systemd[1]: Stopped kubelet.service. Oct 2 19:54:30.544757 systemd[1]: Started kubelet.service. Oct 2 19:54:30.544000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:30.576067 kernel: audit: type=1130 audit(1696276470.544:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:30.731483 kubelet[2154]: E1002 19:54:30.731413 2154 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 19:54:30.735000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:30.745413 kernel: audit: type=1131 audit(1696276470.735:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:30.735245 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:30.735527 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:33.321876 env[1631]: time="2023-10-02T19:54:33.321751867Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:33.328725 env[1631]: time="2023-10-02T19:54:33.328675044Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:33.331809 env[1631]: time="2023-10-02T19:54:33.331758565Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:33.335773 env[1631]: time="2023-10-02T19:54:33.335712319Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:33.336766 env[1631]: time="2023-10-02T19:54:33.336724113Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 19:54:33.357100 env[1631]: time="2023-10-02T19:54:33.356960067Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 19:54:34.004647 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2312736686.mount: Deactivated successfully. Oct 2 19:54:35.076653 env[1631]: time="2023-10-02T19:54:35.076584396Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:35.080312 env[1631]: time="2023-10-02T19:54:35.080260930Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:35.086880 env[1631]: time="2023-10-02T19:54:35.086833298Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:35.093108 env[1631]: time="2023-10-02T19:54:35.092903668Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:35.095358 env[1631]: time="2023-10-02T19:54:35.095307072Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 19:54:38.661346 systemd[1]: Stopped kubelet.service. Oct 2 19:54:38.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.660000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.675587 kernel: audit: type=1130 audit(1696276478.660:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.675740 kernel: audit: type=1131 audit(1696276478.660:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:38.697622 systemd[1]: Reloading. Oct 2 19:54:38.852267 /usr/lib/systemd/system-generators/torcx-generator[2246]: time="2023-10-02T19:54:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:38.852912 /usr/lib/systemd/system-generators/torcx-generator[2246]: time="2023-10-02T19:54:38Z" level=info msg="torcx already run" Oct 2 19:54:38.982832 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:38.982869 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:39.044895 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:39.236005 kernel: audit: type=1400 audit(1696276479.216:424): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236177 kernel: audit: type=1400 audit(1696276479.216:425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250437 kernel: audit: type=1400 audit(1696276479.216:426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250573 kernel: audit: type=1400 audit(1696276479.216:427): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255237 kernel: audit: type=1400 audit(1696276479.216:428): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.260130 kernel: audit: type=1400 audit(1696276479.216:429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.267379 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:54:39.267511 kernel: audit: type=1400 audit(1696276479.216:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.234000 audit: BPF prog-id=52 op=LOAD Oct 2 19:54:39.235000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.237000 audit: BPF prog-id=53 op=LOAD Oct 2 19:54:39.237000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.249000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.249000 audit: BPF prog-id=54 op=LOAD Oct 2 19:54:39.249000 audit: BPF prog-id=36 op=UNLOAD Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit: BPF prog-id=55 op=LOAD Oct 2 19:54:39.255000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit: BPF prog-id=56 op=LOAD Oct 2 19:54:39.259000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit: BPF prog-id=57 op=LOAD Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.268000 audit: BPF prog-id=59 op=LOAD Oct 2 19:54:39.268000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit: BPF prog-id=60 op=LOAD Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit: BPF prog-id=61 op=LOAD Oct 2 19:54:39.269000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:54:39.269000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.273000 audit: BPF prog-id=64 op=LOAD Oct 2 19:54:39.274000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit: BPF prog-id=65 op=LOAD Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:39.274000 audit: BPF prog-id=66 op=LOAD Oct 2 19:54:39.274000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:54:39.274000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:54:39.301547 systemd[1]: Started kubelet.service. Oct 2 19:54:39.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:39.379590 kubelet[2296]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:54:39.379936 kubelet[2296]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:39.380105 kubelet[2296]: I1002 19:54:39.380069 2296 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:54:39.382355 kubelet[2296]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:54:39.382484 kubelet[2296]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:40.353863 kubelet[2296]: I1002 19:54:40.353826 2296 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:54:40.353863 kubelet[2296]: I1002 19:54:40.353854 2296 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:54:40.354185 kubelet[2296]: I1002 19:54:40.354163 2296 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:54:40.361329 kubelet[2296]: E1002 19:54:40.361301 2296 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.29.37:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.361845 kubelet[2296]: I1002 19:54:40.361825 2296 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:54:40.364024 kubelet[2296]: I1002 19:54:40.363995 2296 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:54:40.364378 kubelet[2296]: I1002 19:54:40.364355 2296 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:54:40.364478 kubelet[2296]: I1002 19:54:40.364461 2296 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:54:40.364625 kubelet[2296]: I1002 19:54:40.364487 2296 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:54:40.364625 kubelet[2296]: I1002 19:54:40.364504 2296 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:54:40.364722 kubelet[2296]: I1002 19:54:40.364645 2296 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:40.380929 kubelet[2296]: I1002 19:54:40.380900 2296 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:54:40.380929 kubelet[2296]: I1002 19:54:40.380927 2296 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:54:40.381489 kubelet[2296]: I1002 19:54:40.380952 2296 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:54:40.381489 kubelet[2296]: I1002 19:54:40.380968 2296 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:54:40.382695 kubelet[2296]: I1002 19:54:40.382677 2296 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:54:40.383148 kubelet[2296]: W1002 19:54:40.383133 2296 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:54:40.383807 kubelet[2296]: I1002 19:54:40.383733 2296 server.go:1186] "Started kubelet" Oct 2 19:54:40.384097 kubelet[2296]: W1002 19:54:40.384033 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-37&limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.384219 kubelet[2296]: E1002 19:54:40.384207 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-37&limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.387596 kubelet[2296]: W1002 19:54:40.387543 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.387596 kubelet[2296]: E1002 19:54:40.387600 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.387826 kubelet[2296]: I1002 19:54:40.387786 2296 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:54:40.388837 kubelet[2296]: I1002 19:54:40.388813 2296 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:54:40.389071 kubelet[2296]: E1002 19:54:40.388952 2296 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278be1ee5d7", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 383706583, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 383706583, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.29.37:6443/api/v1/namespaces/default/events": dial tcp 172.31.29.37:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:54:40.390000 audit[2296]: AVC avc: denied { mac_admin } for pid=2296 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:40.390000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:40.390000 audit[2296]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d8f650 a1=c00073d3f8 a2=c000d8f620 a3=25 items=0 ppid=1 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.390000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:40.392010 kubelet[2296]: E1002 19:54:40.391991 2296 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:54:40.392092 kubelet[2296]: E1002 19:54:40.392027 2296 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:54:40.392212 kubelet[2296]: I1002 19:54:40.392000 2296 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:54:40.393214 kubelet[2296]: I1002 19:54:40.393203 2296 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:54:40.392000 audit[2296]: AVC avc: denied { mac_admin } for pid=2296 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:40.392000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:40.392000 audit[2296]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009414a0 a1=c00073d410 a2=c000d8f6e0 a3=25 items=0 ppid=1 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.392000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:40.394175 kubelet[2296]: I1002 19:54:40.394152 2296 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:54:40.398899 kubelet[2296]: I1002 19:54:40.396126 2296 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:54:40.398899 kubelet[2296]: I1002 19:54:40.396222 2296 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:54:40.398899 kubelet[2296]: W1002 19:54:40.396705 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.398899 kubelet[2296]: E1002 19:54:40.396755 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.398899 kubelet[2296]: E1002 19:54:40.397630 2296 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.29.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-37?timeout=10s": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.404000 audit[2306]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.404000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffef2466e0 a2=0 a3=7fffef2466cc items=0 ppid=2296 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.404000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:54:40.407000 audit[2307]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.407000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6b6207c0 a2=0 a3=7fff6b6207ac items=0 ppid=2296 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.407000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:54:40.412000 audit[2309]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.412000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff2ad7eda0 a2=0 a3=7fff2ad7ed8c items=0 ppid=2296 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.412000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:40.422000 audit[2313]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.422000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe65da2450 a2=0 a3=7ffe65da243c items=0 ppid=2296 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.422000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:40.441116 kubelet[2296]: I1002 19:54:40.440606 2296 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:54:40.441116 kubelet[2296]: I1002 19:54:40.440633 2296 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:54:40.441116 kubelet[2296]: I1002 19:54:40.440653 2296 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:40.449000 audit[2317]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.449000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fffc5ec20e0 a2=0 a3=7fffc5ec20cc items=0 ppid=2296 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:54:40.453171 kubelet[2296]: I1002 19:54:40.453137 2296 policy_none.go:49] "None policy: Start" Oct 2 19:54:40.468098 kubelet[2296]: I1002 19:54:40.468013 2296 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:54:40.468841 kubelet[2296]: I1002 19:54:40.468814 2296 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:54:40.470000 audit[2319]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.470000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffa24fe740 a2=0 a3=7fffa24fe72c items=0 ppid=2296 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.470000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:54:40.481000 audit[2323]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.481000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffdd9f1280 a2=0 a3=7fffdd9f126c items=0 ppid=2296 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.481000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:54:40.487990 systemd[1]: Created slice kubepods.slice. Oct 2 19:54:40.489000 audit[2326]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.489000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff5b8926b0 a2=0 a3=7fff5b89269c items=0 ppid=2296 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.489000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:54:40.493000 audit[2327]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.493000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc83b18d10 a2=0 a3=7ffc83b18cfc items=0 ppid=2296 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.493000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:54:40.495139 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:54:40.495000 audit[2328]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.495000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd33398640 a2=0 a3=7ffd3339862c items=0 ppid=2296 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.495000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:54:40.501483 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:54:40.503107 kubelet[2296]: I1002 19:54:40.503077 2296 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-37" Oct 2 19:54:40.504194 kubelet[2296]: E1002 19:54:40.504094 2296 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.37:6443/api/v1/nodes\": dial tcp 172.31.29.37:6443: connect: connection refused" node="ip-172-31-29-37" Oct 2 19:54:40.507000 audit[2330]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.507000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc6af27070 a2=0 a3=7ffc6af2705c items=0 ppid=2296 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.507000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:54:40.509000 audit[2332]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.509000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc6af53640 a2=0 a3=7ffc6af5362c items=0 ppid=2296 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.509000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:54:40.514800 kubelet[2296]: I1002 19:54:40.514768 2296 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:54:40.513000 audit[2296]: AVC avc: denied { mac_admin } for pid=2296 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:40.513000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:40.513000 audit[2296]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0010b9fb0 a1=c001039758 a2=c0010b9f80 a3=25 items=0 ppid=1 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.513000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:40.515410 kubelet[2296]: I1002 19:54:40.514853 2296 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:54:40.518087 kubelet[2296]: I1002 19:54:40.515913 2296 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:54:40.521512 kubelet[2296]: E1002 19:54:40.521429 2296 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-29-37\" not found" Oct 2 19:54:40.529000 audit[2334]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.529000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffdc7c9cd20 a2=0 a3=7ffdc7c9cd0c items=0 ppid=2296 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:54:40.533000 audit[2336]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.533000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffdefa3a540 a2=0 a3=7ffdefa3a52c items=0 ppid=2296 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.533000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:54:40.537000 audit[2338]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.537000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7fff68b10130 a2=0 a3=7fff68b1011c items=0 ppid=2296 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.537000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:54:40.538948 kubelet[2296]: I1002 19:54:40.538930 2296 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:54:40.539000 audit[2339]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.539000 audit[2340]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.539000 audit[2340]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd3c618290 a2=0 a3=7ffd3c61827c items=0 ppid=2296 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:54:40.539000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff1bdef440 a2=0 a3=7fff1bdef42c items=0 ppid=2296 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.539000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:54:40.541000 audit[2341]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.541000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2d09c6b0 a2=0 a3=7ffe2d09c69c items=0 ppid=2296 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:54:40.541000 audit[2342]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=2342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.541000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcb8a410d0 a2=0 a3=7ffcb8a410bc items=0 ppid=2296 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.541000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 19:54:40.543000 audit[2344]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:40.543000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda3d20410 a2=0 a3=7ffda3d203fc items=0 ppid=2296 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.543000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:54:40.547000 audit[2345]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.547000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd8022dde0 a2=0 a3=7ffd8022ddcc items=0 ppid=2296 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.547000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 19:54:40.547000 audit[2346]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.547000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffdf243ba80 a2=0 a3=7ffdf243ba6c items=0 ppid=2296 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.547000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:54:40.551000 audit[2348]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.551000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffd24b85610 a2=0 a3=7ffd24b855fc items=0 ppid=2296 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.551000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 19:54:40.552000 audit[2349]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.552000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffdba8eda0 a2=0 a3=7fffdba8ed8c items=0 ppid=2296 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.552000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 19:54:40.554000 audit[2350]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.554000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff61ecef70 a2=0 a3=7fff61ecef5c items=0 ppid=2296 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:54:40.557000 audit[2352]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.557000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe393aedb0 a2=0 a3=7ffe393aed9c items=0 ppid=2296 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 19:54:40.560000 audit[2354]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.560000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffea7e976a0 a2=0 a3=7ffea7e9768c items=0 ppid=2296 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.560000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:54:40.564000 audit[2356]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.564000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7fffaaa22a90 a2=0 a3=7fffaaa22a7c items=0 ppid=2296 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.564000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 19:54:40.565000 audit[2358]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.565000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffd4acc66b0 a2=0 a3=7ffd4acc669c items=0 ppid=2296 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.565000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 19:54:40.570000 audit[2360]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.570000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffd0477fc20 a2=0 a3=7ffd0477fc0c items=0 ppid=2296 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.570000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 19:54:40.572140 kubelet[2296]: I1002 19:54:40.572032 2296 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:54:40.572253 kubelet[2296]: I1002 19:54:40.572240 2296 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:54:40.572326 kubelet[2296]: I1002 19:54:40.572316 2296 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:54:40.572474 kubelet[2296]: E1002 19:54:40.572464 2296 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:54:40.573000 audit[2361]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.573000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeabd26170 a2=0 a3=7ffeabd2615c items=0 ppid=2296 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.573000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:54:40.574331 kubelet[2296]: W1002 19:54:40.574305 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.574440 kubelet[2296]: E1002 19:54:40.574431 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.574000 audit[2362]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.574000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe781950f0 a2=0 a3=7ffe781950dc items=0 ppid=2296 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.574000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:54:40.575000 audit[2363]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2363 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:40.575000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed6edfee0 a2=0 a3=7ffed6edfecc items=0 ppid=2296 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:40.575000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:54:40.605031 kubelet[2296]: E1002 19:54:40.604620 2296 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.29.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-37?timeout=10s": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:40.673287 kubelet[2296]: I1002 19:54:40.673226 2296 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:54:40.677256 kubelet[2296]: I1002 19:54:40.675350 2296 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:54:40.680339 kubelet[2296]: I1002 19:54:40.680300 2296 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:54:40.684336 kubelet[2296]: I1002 19:54:40.683695 2296 status_manager.go:698] "Failed to get status for pod" podUID=bcb2beb2228473bd31b09a0f04e14bdc pod="kube-system/kube-apiserver-ip-172-31-29-37" err="Get \"https://172.31.29.37:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-29-37\": dial tcp 172.31.29.37:6443: connect: connection refused" Oct 2 19:54:40.688238 kubelet[2296]: I1002 19:54:40.688211 2296 status_manager.go:698] "Failed to get status for pod" podUID=054feff1c165358fd3ea1702ba03edfc pod="kube-system/kube-controller-manager-ip-172-31-29-37" err="Get \"https://172.31.29.37:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-29-37\": dial tcp 172.31.29.37:6443: connect: connection refused" Oct 2 19:54:40.690165 kubelet[2296]: I1002 19:54:40.690136 2296 status_manager.go:698] "Failed to get status for pod" podUID=f8eaa32cb11a97a8f78da02dc04cc6e2 pod="kube-system/kube-scheduler-ip-172-31-29-37" err="Get \"https://172.31.29.37:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-29-37\": dial tcp 172.31.29.37:6443: connect: connection refused" Oct 2 19:54:40.695972 systemd[1]: Created slice kubepods-burstable-podbcb2beb2228473bd31b09a0f04e14bdc.slice. Oct 2 19:54:40.706824 kubelet[2296]: I1002 19:54:40.706793 2296 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-37" Oct 2 19:54:40.708033 kubelet[2296]: E1002 19:54:40.707334 2296 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.37:6443/api/v1/nodes\": dial tcp 172.31.29.37:6443: connect: connection refused" node="ip-172-31-29-37" Oct 2 19:54:40.711545 systemd[1]: Created slice kubepods-burstable-pod054feff1c165358fd3ea1702ba03edfc.slice. Oct 2 19:54:40.716104 kubelet[2296]: I1002 19:54:40.716079 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:40.717080 kubelet[2296]: I1002 19:54:40.717064 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:40.717223 kubelet[2296]: I1002 19:54:40.717211 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f8eaa32cb11a97a8f78da02dc04cc6e2-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-37\" (UID: \"f8eaa32cb11a97a8f78da02dc04cc6e2\") " pod="kube-system/kube-scheduler-ip-172-31-29-37" Oct 2 19:54:40.717374 kubelet[2296]: I1002 19:54:40.717313 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/bcb2beb2228473bd31b09a0f04e14bdc-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-37\" (UID: \"bcb2beb2228473bd31b09a0f04e14bdc\") " pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:40.717495 kubelet[2296]: I1002 19:54:40.717482 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:40.717599 kubelet[2296]: I1002 19:54:40.717589 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:40.718041 kubelet[2296]: I1002 19:54:40.718028 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/bcb2beb2228473bd31b09a0f04e14bdc-ca-certs\") pod \"kube-apiserver-ip-172-31-29-37\" (UID: \"bcb2beb2228473bd31b09a0f04e14bdc\") " pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:40.718317 kubelet[2296]: I1002 19:54:40.718304 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/bcb2beb2228473bd31b09a0f04e14bdc-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-37\" (UID: \"bcb2beb2228473bd31b09a0f04e14bdc\") " pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:40.718448 kubelet[2296]: I1002 19:54:40.718438 2296 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:40.720619 systemd[1]: Created slice kubepods-burstable-podf8eaa32cb11a97a8f78da02dc04cc6e2.slice. Oct 2 19:54:41.006198 kubelet[2296]: E1002 19:54:41.006068 2296 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.29.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-37?timeout=10s": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.011193 env[1631]: time="2023-10-02T19:54:41.011136138Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-37,Uid:bcb2beb2228473bd31b09a0f04e14bdc,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:41.024068 env[1631]: time="2023-10-02T19:54:41.019699192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-37,Uid:054feff1c165358fd3ea1702ba03edfc,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:41.044492 env[1631]: time="2023-10-02T19:54:41.044416699Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-37,Uid:f8eaa32cb11a97a8f78da02dc04cc6e2,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:41.115996 kubelet[2296]: I1002 19:54:41.115962 2296 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-37" Oct 2 19:54:41.116781 kubelet[2296]: E1002 19:54:41.116757 2296 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.37:6443/api/v1/nodes\": dial tcp 172.31.29.37:6443: connect: connection refused" node="ip-172-31-29-37" Oct 2 19:54:41.332199 kubelet[2296]: W1002 19:54:41.332123 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-37&limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.332199 kubelet[2296]: E1002 19:54:41.332207 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-37&limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.335784 kubelet[2296]: W1002 19:54:41.335723 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.335784 kubelet[2296]: E1002 19:54:41.335786 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.602872 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2307694605.mount: Deactivated successfully. Oct 2 19:54:41.619934 env[1631]: time="2023-10-02T19:54:41.619879698Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.622255 env[1631]: time="2023-10-02T19:54:41.622200965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.629175 env[1631]: time="2023-10-02T19:54:41.629122302Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.631878 env[1631]: time="2023-10-02T19:54:41.631816747Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.634511 env[1631]: time="2023-10-02T19:54:41.634412943Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.637941 env[1631]: time="2023-10-02T19:54:41.637890073Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.639890 env[1631]: time="2023-10-02T19:54:41.639727006Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.641635 env[1631]: time="2023-10-02T19:54:41.641594254Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.643847 env[1631]: time="2023-10-02T19:54:41.643804901Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.646234 env[1631]: time="2023-10-02T19:54:41.646188385Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.648770 env[1631]: time="2023-10-02T19:54:41.648724706Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.649912 env[1631]: time="2023-10-02T19:54:41.649869641Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:41.697163 update_engine[1625]: I1002 19:54:41.697108 1625 update_attempter.cc:505] Updating boot flags... Oct 2 19:54:41.739654 env[1631]: time="2023-10-02T19:54:41.739416757Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:41.740578 env[1631]: time="2023-10-02T19:54:41.739681636Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:41.740578 env[1631]: time="2023-10-02T19:54:41.739719228Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:41.743456 env[1631]: time="2023-10-02T19:54:41.743335943Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/192aff86ea4cb1f128f8e9ae368c114e0ef7e72b07206651450b228477fab8c7 pid=2375 runtime=io.containerd.runc.v2 Oct 2 19:54:41.812802 kubelet[2296]: E1002 19:54:41.812758 2296 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.29.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-37?timeout=10s": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.835349 env[1631]: time="2023-10-02T19:54:41.834964582Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:41.835349 env[1631]: time="2023-10-02T19:54:41.835188159Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:41.835349 env[1631]: time="2023-10-02T19:54:41.835206002Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:41.835718 env[1631]: time="2023-10-02T19:54:41.835404271Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7b6288da2e6e4a30d0f099afaae1ebf7c864972d9a647f6db17eeded3ced64da pid=2398 runtime=io.containerd.runc.v2 Oct 2 19:54:41.859485 systemd[1]: Started cri-containerd-192aff86ea4cb1f128f8e9ae368c114e0ef7e72b07206651450b228477fab8c7.scope. Oct 2 19:54:41.869571 kubelet[2296]: W1002 19:54:41.869444 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.29.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.869571 kubelet[2296]: E1002 19:54:41.869549 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.29.37:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:41.895006 env[1631]: time="2023-10-02T19:54:41.894892876Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:41.897555 env[1631]: time="2023-10-02T19:54:41.897473051Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:41.897749 env[1631]: time="2023-10-02T19:54:41.897726447Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:41.902913 env[1631]: time="2023-10-02T19:54:41.902821152Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/956605072e2106985244f7d2d861c5f65f8656ae65e89c4aecae916bb9aabd0f pid=2429 runtime=io.containerd.runc.v2 Oct 2 19:54:41.947349 kubelet[2296]: I1002 19:54:41.946603 2296 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-37" Oct 2 19:54:41.949119 kubelet[2296]: E1002 19:54:41.949077 2296 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.37:6443/api/v1/nodes\": dial tcp 172.31.29.37:6443: connect: connection refused" node="ip-172-31-29-37" Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.959000 audit: BPF prog-id=67 op=LOAD Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001cfc48 a2=10 a3=1c items=0 ppid=2375 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:41.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139326166663836656134636231663132386638653961653336386331 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001cf6b0 a2=3c a3=c items=0 ppid=2375 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:41.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139326166663836656134636231663132386638653961653336386331 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit: BPF prog-id=68 op=LOAD Oct 2 19:54:41.969000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001cf9d8 a2=78 a3=c0002bfc90 items=0 ppid=2375 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:41.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139326166663836656134636231663132386638653961653336386331 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.969000 audit: BPF prog-id=69 op=LOAD Oct 2 19:54:41.969000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001cf770 a2=78 a3=c0002bfcd8 items=0 ppid=2375 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:41.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139326166663836656134636231663132386638653961653336386331 Oct 2 19:54:41.969000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:54:41.971000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { perfmon } for pid=2395 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit[2395]: AVC avc: denied { bpf } for pid=2395 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:41.971000 audit: BPF prog-id=70 op=LOAD Oct 2 19:54:41.971000 audit[2395]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001cfc30 a2=78 a3=c00032a0e8 items=0 ppid=2375 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:41.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139326166663836656134636231663132386638653961653336386331 Oct 2 19:54:42.034214 systemd[1]: Started cri-containerd-7b6288da2e6e4a30d0f099afaae1ebf7c864972d9a647f6db17eeded3ced64da.scope. Oct 2 19:54:42.092866 kubelet[2296]: W1002 19:54:42.092824 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:42.093235 kubelet[2296]: E1002 19:54:42.093218 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:42.124695 systemd[1]: Started cri-containerd-956605072e2106985244f7d2d861c5f65f8656ae65e89c4aecae916bb9aabd0f.scope. Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.185000 audit: BPF prog-id=71 op=LOAD Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.197000 audit: BPF prog-id=72 op=LOAD Oct 2 19:54:42.199000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.202000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.202000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2398 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762363238386461326536653461333064306630393961666161653165 Oct 2 19:54:42.199000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2429 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.203000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363630353037326532313036393835323434663764326438363163 Oct 2 19:54:42.204000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.203000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2398 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.204000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2429 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.203000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762363238386461326536653461333064306630393961666161653165 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363630353037326532313036393835323434663764326438363163 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.205000 audit: BPF prog-id=73 op=LOAD Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.206000 audit: BPF prog-id=74 op=LOAD Oct 2 19:54:42.205000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001cf610 items=0 ppid=2398 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.206000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000388340 items=0 ppid=2429 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762363238386461326536653461333064306630393961666161653165 Oct 2 19:54:42.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363630353037326532313036393835323434663764326438363163 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit: BPF prog-id=75 op=LOAD Oct 2 19:54:42.211000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.211000 audit: BPF prog-id=76 op=LOAD Oct 2 19:54:42.211000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000388388 items=0 ppid=2429 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363630353037326532313036393835323434663764326438363163 Oct 2 19:54:42.266000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:54:42.211000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001cf658 items=0 ppid=2398 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762363238386461326536653461333064306630393961666161653165 Oct 2 19:54:42.268000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:54:42.268000 audit: BPF prog-id=73 op=UNLOAD Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { perfmon } for pid=2437 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2437]: AVC avc: denied { bpf } for pid=2437 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit: BPF prog-id=77 op=LOAD Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.268000 audit: BPF prog-id=78 op=LOAD Oct 2 19:54:42.268000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000388a38 items=0 ppid=2429 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363630353037326532313036393835323434663764326438363163 Oct 2 19:54:42.268000 audit[2437]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cfa68 items=0 ppid=2398 pid=2437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762363238386461326536653461333064306630393961666161653165 Oct 2 19:54:42.323375 env[1631]: time="2023-10-02T19:54:42.321111457Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-29-37,Uid:bcb2beb2228473bd31b09a0f04e14bdc,Namespace:kube-system,Attempt:0,} returns sandbox id \"192aff86ea4cb1f128f8e9ae368c114e0ef7e72b07206651450b228477fab8c7\"" Oct 2 19:54:42.346543 env[1631]: time="2023-10-02T19:54:42.346492837Z" level=info msg="CreateContainer within sandbox \"192aff86ea4cb1f128f8e9ae368c114e0ef7e72b07206651450b228477fab8c7\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:54:42.415427 kubelet[2296]: E1002 19:54:42.415103 2296 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.29.37:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:42.440539 env[1631]: time="2023-10-02T19:54:42.440291027Z" level=info msg="CreateContainer within sandbox \"192aff86ea4cb1f128f8e9ae368c114e0ef7e72b07206651450b228477fab8c7\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d0ab02fbf628bbd4b68c083e148d8143561c45a7bb7e337efdce0b5bf2dbcfdb\"" Oct 2 19:54:42.444071 env[1631]: time="2023-10-02T19:54:42.441551813Z" level=info msg="StartContainer for \"d0ab02fbf628bbd4b68c083e148d8143561c45a7bb7e337efdce0b5bf2dbcfdb\"" Oct 2 19:54:42.498370 env[1631]: time="2023-10-02T19:54:42.496500768Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-29-37,Uid:054feff1c165358fd3ea1702ba03edfc,Namespace:kube-system,Attempt:0,} returns sandbox id \"956605072e2106985244f7d2d861c5f65f8656ae65e89c4aecae916bb9aabd0f\"" Oct 2 19:54:42.513813 env[1631]: time="2023-10-02T19:54:42.513761908Z" level=info msg="CreateContainer within sandbox \"956605072e2106985244f7d2d861c5f65f8656ae65e89c4aecae916bb9aabd0f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:54:42.578601 env[1631]: time="2023-10-02T19:54:42.578552190Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-29-37,Uid:f8eaa32cb11a97a8f78da02dc04cc6e2,Namespace:kube-system,Attempt:0,} returns sandbox id \"7b6288da2e6e4a30d0f099afaae1ebf7c864972d9a647f6db17eeded3ced64da\"" Oct 2 19:54:42.586604 env[1631]: time="2023-10-02T19:54:42.586558326Z" level=info msg="CreateContainer within sandbox \"7b6288da2e6e4a30d0f099afaae1ebf7c864972d9a647f6db17eeded3ced64da\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:54:42.589723 env[1631]: time="2023-10-02T19:54:42.589670118Z" level=info msg="CreateContainer within sandbox \"956605072e2106985244f7d2d861c5f65f8656ae65e89c4aecae916bb9aabd0f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9\"" Oct 2 19:54:42.591167 env[1631]: time="2023-10-02T19:54:42.591127584Z" level=info msg="StartContainer for \"7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9\"" Oct 2 19:54:42.625902 systemd[1]: Started cri-containerd-d0ab02fbf628bbd4b68c083e148d8143561c45a7bb7e337efdce0b5bf2dbcfdb.scope. Oct 2 19:54:42.630986 env[1631]: time="2023-10-02T19:54:42.630926909Z" level=info msg="CreateContainer within sandbox \"7b6288da2e6e4a30d0f099afaae1ebf7c864972d9a647f6db17eeded3ced64da\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99\"" Oct 2 19:54:42.641355 env[1631]: time="2023-10-02T19:54:42.641301848Z" level=info msg="StartContainer for \"cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99\"" Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.687000 audit: BPF prog-id=79 op=LOAD Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2375 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430616230326662663632386262643462363863303833653134386438 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2375 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430616230326662663632386262643462363863303833653134386438 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit: BPF prog-id=80 op=LOAD Oct 2 19:54:42.689000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000232f40 items=0 ppid=2375 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430616230326662663632386262643462363863303833653134386438 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.689000 audit: BPF prog-id=81 op=LOAD Oct 2 19:54:42.689000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000232f88 items=0 ppid=2375 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430616230326662663632386262643462363863303833653134386438 Oct 2 19:54:42.689000 audit: BPF prog-id=81 op=UNLOAD Oct 2 19:54:42.691000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { perfmon } for pid=2594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit[2594]: AVC avc: denied { bpf } for pid=2594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.691000 audit: BPF prog-id=82 op=LOAD Oct 2 19:54:42.691000 audit[2594]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000233398 items=0 ppid=2375 pid=2594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.691000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430616230326662663632386262643462363863303833653134386438 Oct 2 19:54:42.728250 systemd[1]: Started cri-containerd-7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9.scope. Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit: BPF prog-id=83 op=LOAD Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2429 pid=2617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764326636663836643736626133366265376566303038313236313635 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2429 pid=2617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764326636663836643736626133366265376566303038313236313635 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit: BPF prog-id=84 op=LOAD Oct 2 19:54:42.776000 audit[2617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00020ebe0 items=0 ppid=2429 pid=2617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764326636663836643736626133366265376566303038313236313635 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.776000 audit: BPF prog-id=85 op=LOAD Oct 2 19:54:42.776000 audit[2617]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00020ec28 items=0 ppid=2429 pid=2617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764326636663836643736626133366265376566303038313236313635 Oct 2 19:54:42.777000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:54:42.777000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { perfmon } for pid=2617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit[2617]: AVC avc: denied { bpf } for pid=2617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.777000 audit: BPF prog-id=86 op=LOAD Oct 2 19:54:42.777000 audit[2617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00020f038 items=0 ppid=2429 pid=2617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764326636663836643736626133366265376566303038313236313635 Oct 2 19:54:42.783780 systemd[1]: Started cri-containerd-cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99.scope. Oct 2 19:54:42.800795 env[1631]: time="2023-10-02T19:54:42.800732372Z" level=info msg="StartContainer for \"d0ab02fbf628bbd4b68c083e148d8143561c45a7bb7e337efdce0b5bf2dbcfdb\" returns successfully" Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.859000 audit: BPF prog-id=87 op=LOAD Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2398 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366616233313436653130326434356332613035623938366138643263 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2398 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366616233313436653130326434356332613035623938366138643263 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit: BPF prog-id=88 op=LOAD Oct 2 19:54:42.863000 audit[2638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003090c0 items=0 ppid=2398 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366616233313436653130326434356332613035623938366138643263 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit: BPF prog-id=89 op=LOAD Oct 2 19:54:42.863000 audit[2638]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000309108 items=0 ppid=2398 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366616233313436653130326434356332613035623938366138643263 Oct 2 19:54:42.863000 audit: BPF prog-id=89 op=UNLOAD Oct 2 19:54:42.863000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { perfmon } for pid=2638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit[2638]: AVC avc: denied { bpf } for pid=2638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:42.863000 audit: BPF prog-id=90 op=LOAD Oct 2 19:54:42.863000 audit[2638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000309518 items=0 ppid=2398 pid=2638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:42.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366616233313436653130326434356332613035623938366138643263 Oct 2 19:54:42.877785 env[1631]: time="2023-10-02T19:54:42.877725537Z" level=info msg="StartContainer for \"7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9\" returns successfully" Oct 2 19:54:42.931468 env[1631]: time="2023-10-02T19:54:42.931397155Z" level=info msg="StartContainer for \"cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99\" returns successfully" Oct 2 19:54:43.183427 kubelet[2296]: W1002 19:54:43.183342 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.29.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:43.183427 kubelet[2296]: E1002 19:54:43.183391 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.29.37:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:43.413829 kubelet[2296]: E1002 19:54:43.413778 2296 controller.go:146] failed to ensure lease exists, will retry in 3.2s, error: Get "https://172.31.29.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-37?timeout=10s": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:43.558797 kubelet[2296]: I1002 19:54:43.558333 2296 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-37" Oct 2 19:54:43.558797 kubelet[2296]: E1002 19:54:43.558743 2296 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.29.37:6443/api/v1/nodes\": dial tcp 172.31.29.37:6443: connect: connection refused" node="ip-172-31-29-37" Oct 2 19:54:43.622239 kubelet[2296]: W1002 19:54:43.622202 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.29.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-37&limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:43.623140 kubelet[2296]: E1002 19:54:43.623106 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.29.37:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-29-37&limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:43.661470 kubelet[2296]: I1002 19:54:43.661444 2296 status_manager.go:698] "Failed to get status for pod" podUID=054feff1c165358fd3ea1702ba03edfc pod="kube-system/kube-controller-manager-ip-172-31-29-37" err="Get \"https://172.31.29.37:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-29-37\": dial tcp 172.31.29.37:6443: connect: connection refused" Oct 2 19:54:43.667343 kubelet[2296]: I1002 19:54:43.667320 2296 status_manager.go:698] "Failed to get status for pod" podUID=f8eaa32cb11a97a8f78da02dc04cc6e2 pod="kube-system/kube-scheduler-ip-172-31-29-37" err="Get \"https://172.31.29.37:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-29-37\": dial tcp 172.31.29.37:6443: connect: connection refused" Oct 2 19:54:43.697446 kubelet[2296]: I1002 19:54:43.697419 2296 status_manager.go:698] "Failed to get status for pod" podUID=bcb2beb2228473bd31b09a0f04e14bdc pod="kube-system/kube-apiserver-ip-172-31-29-37" err="Get \"https://172.31.29.37:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-29-37\": dial tcp 172.31.29.37:6443: connect: connection refused" Oct 2 19:54:43.805754 kubelet[2296]: W1002 19:54:43.805684 2296 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.29.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:43.805968 kubelet[2296]: E1002 19:54:43.805955 2296 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.29.37:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.29.37:6443: connect: connection refused Oct 2 19:54:45.304000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:45.308631 kernel: kauditd_printk_skb: 664 callbacks suppressed Oct 2 19:54:45.308820 kernel: audit: type=1400 audit(1696276485.304:718): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:45.304000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001234000 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:54:45.332124 kernel: audit: type=1300 audit(1696276485.304:718): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001234000 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:54:45.304000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:45.347114 kernel: audit: type=1327 audit(1696276485.304:718): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:45.304000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:45.368092 kernel: audit: type=1400 audit(1696276485.304:719): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:45.368378 kernel: audit: type=1300 audit(1696276485.304:719): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00038a3e0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:54:45.304000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00038a3e0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:54:45.304000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:45.377122 kernel: audit: type=1327 audit(1696276485.304:719): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:46.761622 kubelet[2296]: I1002 19:54:46.761587 2296 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-37" Oct 2 19:54:47.977000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:47.987070 kernel: audit: type=1400 audit(1696276487.977:720): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:47.979000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:47.979000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00b4ae390 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:54:48.004428 kernel: audit: type=1400 audit(1696276487.979:721): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:48.004520 kernel: audit: type=1300 audit(1696276487.979:721): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00b4ae390 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:54:47.979000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:54:48.016178 kernel: audit: type=1327 audit(1696276487.979:721): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:54:47.977000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0021ee270 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:54:47.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:54:47.980000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:47.980000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0028aa040 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:54:47.980000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:54:47.986000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:47.986000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c00b54c510 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:54:47.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:54:47.990000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:47.990000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0028abd20 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:54:47.990000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:54:47.990000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:47.990000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b54d650 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:54:47.990000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:54:48.277411 kubelet[2296]: E1002 19:54:48.277374 2296 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-29-37\" not found" node="ip-172-31-29-37" Oct 2 19:54:48.299658 kubelet[2296]: I1002 19:54:48.299602 2296 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-37" Oct 2 19:54:48.393955 kubelet[2296]: I1002 19:54:48.393905 2296 apiserver.go:52] "Watching apiserver" Oct 2 19:54:48.434904 kubelet[2296]: E1002 19:54:48.434518 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278be1ee5d7", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 383706583, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 383706583, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.496573 kubelet[2296]: I1002 19:54:48.496535 2296 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:54:48.521597 kubelet[2296]: I1002 19:54:48.521431 2296 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:54:48.533939 kubelet[2296]: E1002 19:54:48.533724 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278be9da6a9", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 392013481, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 392013481, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.602537 kubelet[2296]: E1002 19:54:48.602343 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c1582eb8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-29-37 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437792440, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437792440, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.672543 kubelet[2296]: E1002 19:54:48.672419 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c15842f6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-29-37 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437797622, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437797622, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.731481 kubelet[2296]: E1002 19:54:48.731380 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c158500e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-29-37 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437800974, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437800974, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.805218 kubelet[2296]: E1002 19:54:48.805020 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c1582eb8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-29-37 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437792440, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 503016728, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.869508 kubelet[2296]: E1002 19:54:48.869416 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c15842f6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-29-37 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437797622, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 503021687, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.928606 kubelet[2296]: E1002 19:54:48.927737 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c158500e", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-29-37 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437800974, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 503024714, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:48.991657 kubelet[2296]: E1002 19:54:48.991538 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c644974a", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 520394570, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 520394570, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:49.099340 kubelet[2296]: E1002 19:54:49.098962 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c1582eb8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-29-37 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437792440, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 675246989, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:49.494277 kubelet[2296]: E1002 19:54:49.494092 2296 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-29-37.178a6278c15842f6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-29-37", UID:"ip-172-31-29-37", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-29-37 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-29-37"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 437797622, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 40, 675260865, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:51.055300 systemd[1]: Reloading. Oct 2 19:54:51.246089 /usr/lib/systemd/system-generators/torcx-generator[2726]: time="2023-10-02T19:54:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:51.246127 /usr/lib/systemd/system-generators/torcx-generator[2726]: time="2023-10-02T19:54:51Z" level=info msg="torcx already run" Oct 2 19:54:51.462499 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:51.462935 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:51.538466 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799925 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:54:51.800084 kernel: audit: type=1400 audit(1696276491.792:726): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.810985 kernel: audit: type=1400 audit(1696276491.792:727): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827371 kernel: audit: type=1400 audit(1696276491.792:728): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.852109 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:54:51.852358 kernel: audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:54:51.852409 kernel: audit: backlog limit exceeded Oct 2 19:54:51.852441 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:54:51.852474 kernel: audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 19:54:51.852503 kernel: audit: type=1400 audit(1696276491.792:729): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.852541 kernel: audit: backlog limit exceeded Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.792000 audit: BPF prog-id=91 op=LOAD Oct 2 19:54:51.792000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.803000 audit: BPF prog-id=92 op=LOAD Oct 2 19:54:51.803000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.814000 audit: BPF prog-id=93 op=LOAD Oct 2 19:54:51.816000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.825000 audit: BPF prog-id=94 op=LOAD Oct 2 19:54:51.825000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.827000 audit: BPF prog-id=95 op=LOAD Oct 2 19:54:51.827000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.851000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:54:51.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.867000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.867000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.867000 audit: BPF prog-id=99 op=LOAD Oct 2 19:54:51.867000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit: BPF prog-id=100 op=LOAD Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.868000 audit: BPF prog-id=101 op=LOAD Oct 2 19:54:51.868000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:54:51.868000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.870000 audit: BPF prog-id=102 op=LOAD Oct 2 19:54:51.870000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit: BPF prog-id=103 op=LOAD Oct 2 19:54:51.873000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit: BPF prog-id=104 op=LOAD Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit: BPF prog-id=105 op=LOAD Oct 2 19:54:51.873000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:54:51.873000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit: BPF prog-id=106 op=LOAD Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.875000 audit: BPF prog-id=107 op=LOAD Oct 2 19:54:51.875000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:54:51.875000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.878000 audit: BPF prog-id=108 op=LOAD Oct 2 19:54:51.878000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit: BPF prog-id=109 op=LOAD Oct 2 19:54:51.881000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit: BPF prog-id=110 op=LOAD Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:51.883000 audit: BPF prog-id=111 op=LOAD Oct 2 19:54:51.883000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:54:51.883000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:54:51.936396 systemd[1]: Stopping kubelet.service... Oct 2 19:54:51.949619 kubelet[2296]: I1002 19:54:51.936692 2296 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:54:51.974237 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:54:51.974568 systemd[1]: Stopped kubelet.service. Oct 2 19:54:51.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:51.974651 systemd[1]: kubelet.service: Consumed 1.413s CPU time. Oct 2 19:54:51.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:51.979394 systemd[1]: Started kubelet.service. Oct 2 19:54:52.237587 kubelet[2779]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:54:52.238400 kubelet[2779]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:52.238633 kubelet[2779]: I1002 19:54:52.238578 2779 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:54:52.245844 kubelet[2779]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 19:54:52.245844 kubelet[2779]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:52.255733 kubelet[2779]: I1002 19:54:52.255700 2779 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 19:54:52.255914 kubelet[2779]: I1002 19:54:52.255901 2779 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:54:52.257155 kubelet[2779]: I1002 19:54:52.257134 2779 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 19:54:52.259980 kubelet[2779]: I1002 19:54:52.259961 2779 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:54:52.261371 kubelet[2779]: I1002 19:54:52.261344 2779 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:54:52.274504 kubelet[2779]: I1002 19:54:52.274468 2779 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:54:52.274756 kubelet[2779]: I1002 19:54:52.274735 2779 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:54:52.274844 kubelet[2779]: I1002 19:54:52.274825 2779 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:54:52.274966 kubelet[2779]: I1002 19:54:52.274858 2779 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:54:52.274966 kubelet[2779]: I1002 19:54:52.274880 2779 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 19:54:52.274966 kubelet[2779]: I1002 19:54:52.274923 2779 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:52.287960 kubelet[2779]: I1002 19:54:52.287935 2779 kubelet.go:398] "Attempting to sync node with API server" Oct 2 19:54:52.287960 kubelet[2779]: I1002 19:54:52.287964 2779 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:54:52.289131 kubelet[2779]: I1002 19:54:52.287991 2779 kubelet.go:297] "Adding apiserver pod source" Oct 2 19:54:52.289131 kubelet[2779]: I1002 19:54:52.288009 2779 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:54:52.314000 audit[2791]: USER_ACCT pid=2791 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:52.316000 audit[2791]: CRED_REFR pid=2791 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:52.316447 sudo[2791]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:54:52.317143 sudo[2791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:54:52.344691 kubelet[2779]: I1002 19:54:52.327629 2779 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:54:52.344691 kubelet[2779]: I1002 19:54:52.328328 2779 server.go:1186] "Started kubelet" Oct 2 19:54:52.344000 audit[2791]: USER_START pid=2791 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:52.347239 kubelet[2779]: I1002 19:54:52.345957 2779 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:54:52.347510 kubelet[2779]: I1002 19:54:52.347385 2779 server.go:451] "Adding debug handlers to kubelet server" Oct 2 19:54:52.352000 audit[2779]: AVC avc: denied { mac_admin } for pid=2779 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:52.352000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:52.352000 audit[2779]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d45200 a1=c000d4e6d8 a2=c000d451d0 a3=25 items=0 ppid=1 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:52.352000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:52.363449 kubelet[2779]: I1002 19:54:52.363424 2779 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:54:52.362000 audit[2779]: AVC avc: denied { mac_admin } for pid=2779 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:52.362000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:52.362000 audit[2779]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d601e0 a1=c000d4e6f0 a2=c000d45290 a3=25 items=0 ppid=1 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:52.362000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:52.363878 kubelet[2779]: I1002 19:54:52.363864 2779 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:54:52.363984 kubelet[2779]: I1002 19:54:52.363974 2779 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:54:52.376572 kubelet[2779]: I1002 19:54:52.376537 2779 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 19:54:52.377182 kubelet[2779]: I1002 19:54:52.377161 2779 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 19:54:52.381523 kubelet[2779]: E1002 19:54:52.381498 2779 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:54:52.381844 kubelet[2779]: E1002 19:54:52.381807 2779 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:54:52.488210 kubelet[2779]: I1002 19:54:52.488123 2779 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-29-37" Oct 2 19:54:52.512496 kubelet[2779]: I1002 19:54:52.507869 2779 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:54:52.517592 kubelet[2779]: I1002 19:54:52.516799 2779 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-29-37" Oct 2 19:54:52.517592 kubelet[2779]: I1002 19:54:52.516983 2779 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-29-37" Oct 2 19:54:52.539103 kubelet[2779]: I1002 19:54:52.539042 2779 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:54:52.539103 kubelet[2779]: I1002 19:54:52.539101 2779 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:54:52.539296 kubelet[2779]: I1002 19:54:52.539126 2779 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:52.539343 kubelet[2779]: I1002 19:54:52.539303 2779 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:54:52.539343 kubelet[2779]: I1002 19:54:52.539319 2779 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:54:52.539343 kubelet[2779]: I1002 19:54:52.539328 2779 policy_none.go:49] "None policy: Start" Oct 2 19:54:52.540474 kubelet[2779]: I1002 19:54:52.540439 2779 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:54:52.540474 kubelet[2779]: I1002 19:54:52.540480 2779 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:54:52.540701 kubelet[2779]: I1002 19:54:52.540686 2779 state_mem.go:75] "Updated machine memory state" Oct 2 19:54:52.547323 kubelet[2779]: I1002 19:54:52.547291 2779 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:54:52.547473 kubelet[2779]: I1002 19:54:52.547362 2779 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:54:52.546000 audit[2779]: AVC avc: denied { mac_admin } for pid=2779 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:52.546000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:52.546000 audit[2779]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00125ac00 a1=c000debd58 a2=c00125abd0 a3=25 items=0 ppid=1 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:52.546000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:52.549299 kubelet[2779]: I1002 19:54:52.549215 2779 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:54:52.605435 kubelet[2779]: I1002 19:54:52.605403 2779 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:54:52.605435 kubelet[2779]: I1002 19:54:52.605435 2779 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 19:54:52.605636 kubelet[2779]: I1002 19:54:52.605469 2779 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 19:54:52.605636 kubelet[2779]: E1002 19:54:52.605528 2779 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 19:54:52.706352 kubelet[2779]: I1002 19:54:52.706306 2779 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:54:52.706608 kubelet[2779]: I1002 19:54:52.706589 2779 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:54:52.707322 kubelet[2779]: I1002 19:54:52.707301 2779 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:54:52.725267 kubelet[2779]: E1002 19:54:52.725240 2779 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-29-37\" already exists" pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:52.788419 kubelet[2779]: I1002 19:54:52.788386 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/bcb2beb2228473bd31b09a0f04e14bdc-ca-certs\") pod \"kube-apiserver-ip-172-31-29-37\" (UID: \"bcb2beb2228473bd31b09a0f04e14bdc\") " pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:52.788891 kubelet[2779]: I1002 19:54:52.788873 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/bcb2beb2228473bd31b09a0f04e14bdc-k8s-certs\") pod \"kube-apiserver-ip-172-31-29-37\" (UID: \"bcb2beb2228473bd31b09a0f04e14bdc\") " pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:52.789112 kubelet[2779]: I1002 19:54:52.789026 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-ca-certs\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:52.789279 kubelet[2779]: I1002 19:54:52.789267 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:52.789401 kubelet[2779]: I1002 19:54:52.789383 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-kubeconfig\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:52.789482 kubelet[2779]: I1002 19:54:52.789431 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f8eaa32cb11a97a8f78da02dc04cc6e2-kubeconfig\") pod \"kube-scheduler-ip-172-31-29-37\" (UID: \"f8eaa32cb11a97a8f78da02dc04cc6e2\") " pod="kube-system/kube-scheduler-ip-172-31-29-37" Oct 2 19:54:52.789482 kubelet[2779]: I1002 19:54:52.789472 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/bcb2beb2228473bd31b09a0f04e14bdc-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-29-37\" (UID: \"bcb2beb2228473bd31b09a0f04e14bdc\") " pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:52.789568 kubelet[2779]: I1002 19:54:52.789505 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-k8s-certs\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:52.789568 kubelet[2779]: I1002 19:54:52.789545 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/054feff1c165358fd3ea1702ba03edfc-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-29-37\" (UID: \"054feff1c165358fd3ea1702ba03edfc\") " pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:53.233766 sudo[2791]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:53.232000 audit[2791]: USER_END pid=2791 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.233000 audit[2791]: CRED_DISP pid=2791 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:53.306989 kubelet[2779]: I1002 19:54:53.306945 2779 apiserver.go:52] "Watching apiserver" Oct 2 19:54:53.377794 kubelet[2779]: I1002 19:54:53.377742 2779 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 19:54:53.394905 kubelet[2779]: I1002 19:54:53.394869 2779 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:54:53.625697 kubelet[2779]: E1002 19:54:53.625577 2779 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-29-37\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-29-37" Oct 2 19:54:53.902985 kubelet[2779]: E1002 19:54:53.902877 2779 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-29-37\" already exists" pod="kube-system/kube-apiserver-ip-172-31-29-37" Oct 2 19:54:54.095882 kubelet[2779]: E1002 19:54:54.095847 2779 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-29-37\" already exists" pod="kube-system/kube-scheduler-ip-172-31-29-37" Oct 2 19:54:54.903146 kubelet[2779]: I1002 19:54:54.903109 2779 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-29-37" podStartSLOduration=2.901475508 pod.CreationTimestamp="2023-10-02 19:54:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:54.299678588 +0000 UTC m=+2.279431745" watchObservedRunningTime="2023-10-02 19:54:54.901475508 +0000 UTC m=+2.881228663" Oct 2 19:54:55.204000 audit[1893]: USER_END pid=1893 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:55.204000 audit[1893]: CRED_DISP pid=1893 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:55.205122 sudo[1893]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:55.230223 sshd[1890]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:55.230000 audit[1890]: USER_END pid=1890 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:55.231000 audit[1890]: CRED_DISP pid=1890 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:55.234313 systemd[1]: sshd@6-172.31.29.37:22-139.178.89.65:43822.service: Deactivated successfully. Oct 2 19:54:55.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.29.37:22-139.178.89.65:43822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:55.235315 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:54:55.235527 systemd[1]: session-7.scope: Consumed 4.471s CPU time. Oct 2 19:54:55.236181 systemd-logind[1624]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:54:55.237282 systemd-logind[1624]: Removed session 7. Oct 2 19:54:55.302152 kubelet[2779]: I1002 19:54:55.302111 2779 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-29-37" podStartSLOduration=3.30191344 pod.CreationTimestamp="2023-10-02 19:54:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:54.905910903 +0000 UTC m=+2.885664035" watchObservedRunningTime="2023-10-02 19:54:55.30191344 +0000 UTC m=+3.281666595" Oct 2 19:55:02.755134 kernel: kauditd_printk_skb: 314 callbacks suppressed Oct 2 19:55:02.755555 kernel: audit: type=1400 audit(1696276502.746:957): avc: denied { watch } for pid=2649 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521307 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:55:02.746000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521307 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:55:02.746000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d34980 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.766290 kernel: audit: type=1300 audit(1696276502.746:957): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d34980 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.746000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:02.776086 kernel: audit: type=1327 audit(1696276502.746:957): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:02.846000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:02.883324 kernel: audit: type=1400 audit(1696276502.846:958): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:02.846000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f70ec0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.919534 kernel: audit: type=1300 audit(1696276502.846:958): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f70ec0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.846000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:02.948191 kernel: audit: type=1327 audit(1696276502.846:958): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:02.948395 kernel: audit: type=1400 audit(1696276502.897:959): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:02.897000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:02.897000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000db7b40 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.897000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:02.993015 kernel: audit: type=1300 audit(1696276502.897:959): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000db7b40 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.993095 kernel: audit: type=1327 audit(1696276502.897:959): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:02.911000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:02.911000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000db7ca0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.911000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:02.916000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:02.916000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000db7dc0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:02.916000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:03.026763 kernel: audit: type=1400 audit(1696276502.911:960): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:04.471373 kubelet[2779]: I1002 19:55:04.471245 2779 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:55:04.473459 env[1631]: time="2023-10-02T19:55:04.473415776Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:55:04.473874 kubelet[2779]: I1002 19:55:04.473765 2779 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:55:05.386889 kubelet[2779]: I1002 19:55:05.386821 2779 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:05.400636 systemd[1]: Created slice kubepods-besteffort-pod41e07d2a_c83d_4976_a3e5_f8243fbd3cbd.slice. Oct 2 19:55:05.408364 kubelet[2779]: I1002 19:55:05.408328 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/41e07d2a-c83d-4976-a3e5-f8243fbd3cbd-lib-modules\") pod \"kube-proxy-9jvsg\" (UID: \"41e07d2a-c83d-4976-a3e5-f8243fbd3cbd\") " pod="kube-system/kube-proxy-9jvsg" Oct 2 19:55:05.408594 kubelet[2779]: I1002 19:55:05.408581 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/41e07d2a-c83d-4976-a3e5-f8243fbd3cbd-xtables-lock\") pod \"kube-proxy-9jvsg\" (UID: \"41e07d2a-c83d-4976-a3e5-f8243fbd3cbd\") " pod="kube-system/kube-proxy-9jvsg" Oct 2 19:55:05.408736 kubelet[2779]: I1002 19:55:05.408727 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/41e07d2a-c83d-4976-a3e5-f8243fbd3cbd-kube-proxy\") pod \"kube-proxy-9jvsg\" (UID: \"41e07d2a-c83d-4976-a3e5-f8243fbd3cbd\") " pod="kube-system/kube-proxy-9jvsg" Oct 2 19:55:05.408856 kubelet[2779]: I1002 19:55:05.408845 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jrmbn\" (UniqueName: \"kubernetes.io/projected/41e07d2a-c83d-4976-a3e5-f8243fbd3cbd-kube-api-access-jrmbn\") pod \"kube-proxy-9jvsg\" (UID: \"41e07d2a-c83d-4976-a3e5-f8243fbd3cbd\") " pod="kube-system/kube-proxy-9jvsg" Oct 2 19:55:05.469467 kubelet[2779]: I1002 19:55:05.469432 2779 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:05.480241 systemd[1]: Created slice kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice. Oct 2 19:55:05.510611 kubelet[2779]: I1002 19:55:05.510569 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5d8300eb-8d6b-43c7-b224-ad18e1860402-clustermesh-secrets\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511367 kubelet[2779]: I1002 19:55:05.510858 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cni-path\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511367 kubelet[2779]: I1002 19:55:05.510905 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-bpf-maps\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511367 kubelet[2779]: I1002 19:55:05.510935 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-cgroup\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511367 kubelet[2779]: I1002 19:55:05.510977 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-xtables-lock\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511367 kubelet[2779]: I1002 19:55:05.511005 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-hostproc\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511367 kubelet[2779]: I1002 19:55:05.511036 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-lib-modules\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511710 kubelet[2779]: I1002 19:55:05.511078 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-run\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511710 kubelet[2779]: I1002 19:55:05.511114 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-etc-cni-netd\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511710 kubelet[2779]: I1002 19:55:05.511166 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-config-path\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511710 kubelet[2779]: I1002 19:55:05.511297 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-net\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511710 kubelet[2779]: I1002 19:55:05.511329 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-kernel\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511710 kubelet[2779]: I1002 19:55:05.511360 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-hubble-tls\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.511976 kubelet[2779]: I1002 19:55:05.511445 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tpdc4\" (UniqueName: \"kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-kube-api-access-tpdc4\") pod \"cilium-jbllf\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " pod="kube-system/cilium-jbllf" Oct 2 19:55:05.591828 kubelet[2779]: I1002 19:55:05.591788 2779 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:55:05.601220 systemd[1]: Created slice kubepods-besteffort-pod4f321075_2ece_4798_a08d_a47dbb261e85.slice. Oct 2 19:55:05.612883 kubelet[2779]: I1002 19:55:05.612845 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f321075-2ece-4798-a08d-a47dbb261e85-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-m2z72\" (UID: \"4f321075-2ece-4798-a08d-a47dbb261e85\") " pod="kube-system/cilium-operator-f59cbd8c6-m2z72" Oct 2 19:55:05.613024 kubelet[2779]: I1002 19:55:05.612975 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xxxx4\" (UniqueName: \"kubernetes.io/projected/4f321075-2ece-4798-a08d-a47dbb261e85-kube-api-access-xxxx4\") pod \"cilium-operator-f59cbd8c6-m2z72\" (UID: \"4f321075-2ece-4798-a08d-a47dbb261e85\") " pod="kube-system/cilium-operator-f59cbd8c6-m2z72" Oct 2 19:55:05.917100 env[1631]: time="2023-10-02T19:55:05.916583845Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-m2z72,Uid:4f321075-2ece-4798-a08d-a47dbb261e85,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:05.962461 env[1631]: time="2023-10-02T19:55:05.962354490Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:05.962461 env[1631]: time="2023-10-02T19:55:05.962421074Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:05.962754 env[1631]: time="2023-10-02T19:55:05.962443060Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:05.962754 env[1631]: time="2023-10-02T19:55:05.962701312Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938 pid=2879 runtime=io.containerd.runc.v2 Oct 2 19:55:05.988508 systemd[1]: Started cri-containerd-2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938.scope. Oct 2 19:55:06.012946 env[1631]: time="2023-10-02T19:55:06.012896601Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-9jvsg,Uid:41e07d2a-c83d-4976-a3e5-f8243fbd3cbd,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:06.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.037000 audit: BPF prog-id=112 op=LOAD Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2879 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262336331653437323431346238613365343030333935323231643834 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2879 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262336331653437323431346238613365343030333935323231643834 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit: BPF prog-id=113 op=LOAD Oct 2 19:55:06.039000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000096340 items=0 ppid=2879 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262336331653437323431346238613365343030333935323231643834 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit: BPF prog-id=114 op=LOAD Oct 2 19:55:06.039000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000096388 items=0 ppid=2879 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262336331653437323431346238613365343030333935323231643834 Oct 2 19:55:06.039000 audit: BPF prog-id=114 op=UNLOAD Oct 2 19:55:06.039000 audit: BPF prog-id=113 op=UNLOAD Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { perfmon } for pid=2889 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit[2889]: AVC avc: denied { bpf } for pid=2889 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.039000 audit: BPF prog-id=115 op=LOAD Oct 2 19:55:06.039000 audit[2889]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000096798 items=0 ppid=2879 pid=2889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262336331653437323431346238613365343030333935323231643834 Oct 2 19:55:06.070091 env[1631]: time="2023-10-02T19:55:06.069987759Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:06.070395 env[1631]: time="2023-10-02T19:55:06.070150717Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:06.070395 env[1631]: time="2023-10-02T19:55:06.070199123Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:06.070555 env[1631]: time="2023-10-02T19:55:06.070511037Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9c9f91988d3b3ae464bfcdad666c0dcb729bf45d9781a44abcdbf74dcbe4b1cc pid=2913 runtime=io.containerd.runc.v2 Oct 2 19:55:06.094875 env[1631]: time="2023-10-02T19:55:06.094623114Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jbllf,Uid:5d8300eb-8d6b-43c7-b224-ad18e1860402,Namespace:kube-system,Attempt:0,}" Oct 2 19:55:06.106690 systemd[1]: Started cri-containerd-9c9f91988d3b3ae464bfcdad666c0dcb729bf45d9781a44abcdbf74dcbe4b1cc.scope. Oct 2 19:55:06.134914 env[1631]: time="2023-10-02T19:55:06.134862376Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-m2z72,Uid:4f321075-2ece-4798-a08d-a47dbb261e85,Namespace:kube-system,Attempt:0,} returns sandbox id \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\"" Oct 2 19:55:06.141731 env[1631]: time="2023-10-02T19:55:06.140117383Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:55:06.151360 env[1631]: time="2023-10-02T19:55:06.151253544Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:06.151550 env[1631]: time="2023-10-02T19:55:06.151385272Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:06.151550 env[1631]: time="2023-10-02T19:55:06.151416681Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:06.151958 env[1631]: time="2023-10-02T19:55:06.151873513Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816 pid=2957 runtime=io.containerd.runc.v2 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.159000 audit: BPF prog-id=116 op=LOAD Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2913 pid=2925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963396639313938386433623361653436346266636461643636366330 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2913 pid=2925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963396639313938386433623361653436346266636461643636366330 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.160000 audit: BPF prog-id=117 op=LOAD Oct 2 19:55:06.160000 audit[2925]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000244a0 items=0 ppid=2913 pid=2925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963396639313938386433623361653436346266636461643636366330 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit: BPF prog-id=118 op=LOAD Oct 2 19:55:06.161000 audit[2925]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000244e8 items=0 ppid=2913 pid=2925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963396639313938386433623361653436346266636461643636366330 Oct 2 19:55:06.161000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:55:06.161000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { perfmon } for pid=2925 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit[2925]: AVC avc: denied { bpf } for pid=2925 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.161000 audit: BPF prog-id=119 op=LOAD Oct 2 19:55:06.161000 audit[2925]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000248f8 items=0 ppid=2913 pid=2925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963396639313938386433623361653436346266636461643636366330 Oct 2 19:55:06.201561 systemd[1]: Started cri-containerd-62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816.scope. Oct 2 19:55:06.229526 env[1631]: time="2023-10-02T19:55:06.229478946Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-9jvsg,Uid:41e07d2a-c83d-4976-a3e5-f8243fbd3cbd,Namespace:kube-system,Attempt:0,} returns sandbox id \"9c9f91988d3b3ae464bfcdad666c0dcb729bf45d9781a44abcdbf74dcbe4b1cc\"" Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.234000 audit: BPF prog-id=120 op=LOAD Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2957 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539613661643831366361303339663531636431623334333734 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2957 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539613661643831366361303339663531636431623334333734 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.237000 audit: BPF prog-id=121 op=LOAD Oct 2 19:55:06.237000 audit[2967]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003b46f0 items=0 ppid=2957 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539613661643831366361303339663531636431623334333734 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.239000 audit: BPF prog-id=122 op=LOAD Oct 2 19:55:06.239000 audit[2967]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003b4738 items=0 ppid=2957 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539613661643831366361303339663531636431623334333734 Oct 2 19:55:06.243676 env[1631]: time="2023-10-02T19:55:06.243629555Z" level=info msg="CreateContainer within sandbox \"9c9f91988d3b3ae464bfcdad666c0dcb729bf45d9781a44abcdbf74dcbe4b1cc\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:55:06.243000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:55:06.245000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { perfmon } for pid=2967 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit[2967]: AVC avc: denied { bpf } for pid=2967 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.245000 audit: BPF prog-id=123 op=LOAD Oct 2 19:55:06.245000 audit[2967]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003b4b48 items=0 ppid=2957 pid=2967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632643539613661643831366361303339663531636431623334333734 Oct 2 19:55:06.267968 env[1631]: time="2023-10-02T19:55:06.267923374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-jbllf,Uid:5d8300eb-8d6b-43c7-b224-ad18e1860402,Namespace:kube-system,Attempt:0,} returns sandbox id \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\"" Oct 2 19:55:06.288010 env[1631]: time="2023-10-02T19:55:06.287171734Z" level=info msg="CreateContainer within sandbox \"9c9f91988d3b3ae464bfcdad666c0dcb729bf45d9781a44abcdbf74dcbe4b1cc\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"20717b413b4484d177090321fdb5276405af1e478d422c2e6ed7675ff95bc07e\"" Oct 2 19:55:06.290454 env[1631]: time="2023-10-02T19:55:06.290413244Z" level=info msg="StartContainer for \"20717b413b4484d177090321fdb5276405af1e478d422c2e6ed7675ff95bc07e\"" Oct 2 19:55:06.324168 systemd[1]: Started cri-containerd-20717b413b4484d177090321fdb5276405af1e478d422c2e6ed7675ff95bc07e.scope. Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2913 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137623431336234343834643137373039303332316664623532 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit: BPF prog-id=124 op=LOAD Oct 2 19:55:06.365000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003ae520 items=0 ppid=2913 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137623431336234343834643137373039303332316664623532 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.365000 audit: BPF prog-id=125 op=LOAD Oct 2 19:55:06.365000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003ae568 items=0 ppid=2913 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137623431336234343834643137373039303332316664623532 Oct 2 19:55:06.366000 audit: BPF prog-id=125 op=UNLOAD Oct 2 19:55:06.366000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { perfmon } for pid=3006 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit[3006]: AVC avc: denied { bpf } for pid=3006 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:06.366000 audit: BPF prog-id=126 op=LOAD Oct 2 19:55:06.366000 audit[3006]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003ae5f8 items=0 ppid=2913 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3230373137623431336234343834643137373039303332316664623532 Oct 2 19:55:06.400434 env[1631]: time="2023-10-02T19:55:06.400373489Z" level=info msg="StartContainer for \"20717b413b4484d177090321fdb5276405af1e478d422c2e6ed7675ff95bc07e\" returns successfully" Oct 2 19:55:06.756000 audit[3054]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=3054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.756000 audit[3054]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffee9504200 a2=0 a3=7ffee95041ec items=0 ppid=3016 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:06.757000 audit[3055]: NETFILTER_CFG table=mangle:60 family=10 entries=1 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:06.757000 audit[3055]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd2a913880 a2=0 a3=7ffd2a91386c items=0 ppid=3016 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.757000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:06.760000 audit[3056]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.760000 audit[3056]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8d353580 a2=0 a3=7ffd8d35356c items=0 ppid=3016 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:06.763000 audit[3057]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.763000 audit[3057]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdcdab5e90 a2=0 a3=7ffdcdab5e7c items=0 ppid=3016 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:06.766000 audit[3058]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:06.766000 audit[3058]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8b516f00 a2=0 a3=7ffd8b516eec items=0 ppid=3016 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.766000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:06.771000 audit[3059]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:06.771000 audit[3059]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd986a4ea0 a2=0 a3=7ffd986a4e8c items=0 ppid=3016 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.771000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:06.870000 audit[3060]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3060 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.870000 audit[3060]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffec12fff40 a2=0 a3=7ffec12fff2c items=0 ppid=3016 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.870000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:06.880000 audit[3062]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.880000 audit[3062]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffffdb54060 a2=0 a3=7ffffdb5404c items=0 ppid=3016 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.880000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:55:06.907000 audit[3065]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.907000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc1e6b1310 a2=0 a3=7ffc1e6b12fc items=0 ppid=3016 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.907000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:55:06.912000 audit[3066]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.912000 audit[3066]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2fcb57f0 a2=0 a3=7ffd2fcb57dc items=0 ppid=3016 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.912000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:06.928000 audit[3068]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.928000 audit[3068]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc3d8319e0 a2=0 a3=7ffc3d8319cc items=0 ppid=3016 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.928000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:06.932000 audit[3069]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.932000 audit[3069]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd832543b0 a2=0 a3=7ffd8325439c items=0 ppid=3016 pid=3069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.932000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:06.939000 audit[3071]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.939000 audit[3071]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff6b4c3000 a2=0 a3=7fff6b4c2fec items=0 ppid=3016 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.939000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:06.948000 audit[3074]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.948000 audit[3074]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc97cefc50 a2=0 a3=7ffc97cefc3c items=0 ppid=3016 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.948000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:55:06.950000 audit[3075]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.950000 audit[3075]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5598a8e0 a2=0 a3=7ffd5598a8cc items=0 ppid=3016 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.950000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:06.956000 audit[3077]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.956000 audit[3077]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffde7651b50 a2=0 a3=7ffde7651b3c items=0 ppid=3016 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.956000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:06.960000 audit[3078]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.960000 audit[3078]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0ffd56d0 a2=0 a3=7ffd0ffd56bc items=0 ppid=3016 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.960000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:06.965000 audit[3080]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.965000 audit[3080]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffbca946e0 a2=0 a3=7fffbca946cc items=0 ppid=3016 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.965000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:06.977000 audit[3083]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.977000 audit[3083]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffff02eb9c0 a2=0 a3=7ffff02eb9ac items=0 ppid=3016 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.977000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:06.991000 audit[3086]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.991000 audit[3086]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc75f1ce20 a2=0 a3=7ffc75f1ce0c items=0 ppid=3016 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.991000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:06.995000 audit[3087]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:06.995000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff354df6c0 a2=0 a3=7fff354df6ac items=0 ppid=3016 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:06.995000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:07.005000 audit[3089]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:07.005000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd86737430 a2=0 a3=7ffd8673741c items=0 ppid=3016 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.005000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:07.028000 audit[3092]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:07.028000 audit[3092]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe6a219e60 a2=0 a3=7ffe6a219e4c items=0 ppid=3016 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.028000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:07.064000 audit[3096]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:07.064000 audit[3096]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffee918e260 a2=0 a3=7ffee918e24c items=0 ppid=3016 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:07.074000 audit[3096]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:07.074000 audit[3096]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffee918e260 a2=0 a3=7ffee918e24c items=0 ppid=3016 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.074000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:07.078000 audit[3100]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3100 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.078000 audit[3100]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe336ed1a0 a2=0 a3=7ffe336ed18c items=0 ppid=3016 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.078000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:07.084000 audit[3102]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3102 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.084000 audit[3102]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcf1e8ac10 a2=0 a3=7ffcf1e8abfc items=0 ppid=3016 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.084000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:55:07.100000 audit[3105]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3105 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.100000 audit[3105]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffe0a63ce0 a2=0 a3=7fffe0a63ccc items=0 ppid=3016 pid=3105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.100000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:55:07.104000 audit[3106]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.104000 audit[3106]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2f5b9440 a2=0 a3=7ffe2f5b942c items=0 ppid=3016 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.104000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:07.113000 audit[3108]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3108 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.113000 audit[3108]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff76f59400 a2=0 a3=7fff76f593ec items=0 ppid=3016 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.113000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:07.116000 audit[3109]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.116000 audit[3109]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa297bf80 a2=0 a3=7fffa297bf6c items=0 ppid=3016 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.116000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:07.122000 audit[3111]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3111 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.122000 audit[3111]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcb0194590 a2=0 a3=7ffcb019457c items=0 ppid=3016 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.122000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:55:07.133000 audit[3114]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3114 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.133000 audit[3114]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe90f44f90 a2=0 a3=7ffe90f44f7c items=0 ppid=3016 pid=3114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:07.135000 audit[3115]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.135000 audit[3115]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcbbbbf4b0 a2=0 a3=7ffcbbbbf49c items=0 ppid=3016 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.135000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:07.140000 audit[3117]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3117 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.140000 audit[3117]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdbb363220 a2=0 a3=7ffdbb36320c items=0 ppid=3016 pid=3117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.140000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:07.142000 audit[3118]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3118 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.142000 audit[3118]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe2b4b4c0 a2=0 a3=7fffe2b4b4ac items=0 ppid=3016 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.142000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:07.147000 audit[3120]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3120 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.147000 audit[3120]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc72e60be0 a2=0 a3=7ffc72e60bcc items=0 ppid=3016 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.147000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:07.153000 audit[3123]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.153000 audit[3123]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffca554cc80 a2=0 a3=7ffca554cc6c items=0 ppid=3016 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:07.170000 audit[3126]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3126 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.170000 audit[3126]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc9a67a670 a2=0 a3=7ffc9a67a65c items=0 ppid=3016 pid=3126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:55:07.187000 audit[3127]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.187000 audit[3127]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffee9fd1c0 a2=0 a3=7fffee9fd1ac items=0 ppid=3016 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.187000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:07.210000 audit[3129]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3129 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.210000 audit[3129]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff3f4894c0 a2=0 a3=7fff3f4894ac items=0 ppid=3016 pid=3129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.210000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:07.217000 audit[3132]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3132 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:07.217000 audit[3132]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffa7324990 a2=0 a3=7fffa732497c items=0 ppid=3016 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.217000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:07.242000 audit[3136]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:07.242000 audit[3136]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc01713d40 a2=0 a3=7ffc01713d2c items=0 ppid=3016 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.242000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:07.243000 audit[3136]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:07.243000 audit[3136]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffc01713d40 a2=0 a3=7ffc01713d2c items=0 ppid=3016 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:07.243000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:07.392091 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1475583058.mount: Deactivated successfully. Oct 2 19:55:09.004925 env[1631]: time="2023-10-02T19:55:09.004873017Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:09.008691 env[1631]: time="2023-10-02T19:55:09.008640896Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:09.012071 env[1631]: time="2023-10-02T19:55:09.011999854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:09.012749 env[1631]: time="2023-10-02T19:55:09.012706808Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:55:09.017730 env[1631]: time="2023-10-02T19:55:09.015549794Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:55:09.019762 env[1631]: time="2023-10-02T19:55:09.019661407Z" level=info msg="CreateContainer within sandbox \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:55:09.048182 env[1631]: time="2023-10-02T19:55:09.048129898Z" level=info msg="CreateContainer within sandbox \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\"" Oct 2 19:55:09.050652 env[1631]: time="2023-10-02T19:55:09.049196138Z" level=info msg="StartContainer for \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\"" Oct 2 19:55:09.085805 systemd[1]: Started cri-containerd-8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090.scope. Oct 2 19:55:09.136123 kernel: kauditd_printk_skb: 351 callbacks suppressed Oct 2 19:55:09.136355 kernel: audit: type=1400 audit(1696276509.127:1066): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.136402 kernel: audit: type=1400 audit(1696276509.127:1067): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.159961 kernel: audit: type=1400 audit(1696276509.127:1068): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.169196 kernel: audit: type=1400 audit(1696276509.127:1069): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.169284 kernel: audit: type=1400 audit(1696276509.127:1070): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.169313 kernel: audit: type=1400 audit(1696276509.127:1071): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.182193 kernel: audit: type=1400 audit(1696276509.127:1072): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.198798 kernel: audit: type=1400 audit(1696276509.127:1073): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.198995 kernel: audit: type=1400 audit(1696276509.127:1074): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.204738 kernel: audit: type=1400 audit(1696276509.135:1075): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit: BPF prog-id=127 op=LOAD Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2879 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:09.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866663239643736353532643236653264366237343237653537663034 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2879 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:09.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866663239643736353532643236653264366237343237653537663034 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.135000 audit: BPF prog-id=128 op=LOAD Oct 2 19:55:09.135000 audit[3144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003b8360 items=0 ppid=2879 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:09.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866663239643736353532643236653264366237343237653537663034 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit: BPF prog-id=129 op=LOAD Oct 2 19:55:09.142000 audit[3144]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003b83a8 items=0 ppid=2879 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:09.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866663239643736353532643236653264366237343237653537663034 Oct 2 19:55:09.142000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:55:09.142000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { perfmon } for pid=3144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit[3144]: AVC avc: denied { bpf } for pid=3144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:09.142000 audit: BPF prog-id=130 op=LOAD Oct 2 19:55:09.142000 audit[3144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003b87b8 items=0 ppid=2879 pid=3144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:09.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866663239643736353532643236653264366237343237653537663034 Oct 2 19:55:09.232822 env[1631]: time="2023-10-02T19:55:09.232754948Z" level=info msg="StartContainer for \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\" returns successfully" Oct 2 19:55:09.341000 audit[3154]: AVC avc: denied { map_create } for pid=3154 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c38,c174 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c38,c174 tclass=bpf permissive=0 Oct 2 19:55:09.341000 audit[3154]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006977d0 a2=48 a3=c0006977c0 items=0 ppid=2879 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c38,c174 key=(null) Oct 2 19:55:09.341000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:55:09.722224 kubelet[2779]: I1002 19:55:09.721858 2779 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-9jvsg" podStartSLOduration=4.721762548 pod.CreationTimestamp="2023-10-02 19:55:05 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:06.697563599 +0000 UTC m=+14.677316753" watchObservedRunningTime="2023-10-02 19:55:09.721762548 +0000 UTC m=+17.701515705" Oct 2 19:55:17.906209 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3524650251.mount: Deactivated successfully. Oct 2 19:55:23.148248 env[1631]: time="2023-10-02T19:55:23.148005813Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:23.152263 env[1631]: time="2023-10-02T19:55:23.152217767Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:23.155347 env[1631]: time="2023-10-02T19:55:23.155297803Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:23.156100 env[1631]: time="2023-10-02T19:55:23.156038773Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:55:23.162592 env[1631]: time="2023-10-02T19:55:23.162546194Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:55:23.197102 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1476668767.mount: Deactivated successfully. Oct 2 19:55:23.204790 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1660720722.mount: Deactivated successfully. Oct 2 19:55:23.213014 env[1631]: time="2023-10-02T19:55:23.212782985Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\"" Oct 2 19:55:23.214307 env[1631]: time="2023-10-02T19:55:23.214211490Z" level=info msg="StartContainer for \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\"" Oct 2 19:55:23.247258 systemd[1]: Started cri-containerd-4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7.scope. Oct 2 19:55:23.267539 systemd[1]: cri-containerd-4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7.scope: Deactivated successfully. Oct 2 19:55:23.464812 env[1631]: time="2023-10-02T19:55:23.463561259Z" level=info msg="shim disconnected" id=4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7 Oct 2 19:55:23.464812 env[1631]: time="2023-10-02T19:55:23.463617986Z" level=warning msg="cleaning up after shim disconnected" id=4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7 namespace=k8s.io Oct 2 19:55:23.464812 env[1631]: time="2023-10-02T19:55:23.463629982Z" level=info msg="cleaning up dead shim" Oct 2 19:55:23.476132 env[1631]: time="2023-10-02T19:55:23.476071964Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3205 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:23.476527 env[1631]: time="2023-10-02T19:55:23.476382804Z" level=error msg="copy shim log" error="read /proc/self/fd/54: file already closed" Oct 2 19:55:23.476912 env[1631]: time="2023-10-02T19:55:23.476868257Z" level=error msg="Failed to pipe stderr of container \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\"" error="reading from a closed fifo" Oct 2 19:55:23.477184 env[1631]: time="2023-10-02T19:55:23.477135003Z" level=error msg="Failed to pipe stdout of container \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\"" error="reading from a closed fifo" Oct 2 19:55:23.480307 env[1631]: time="2023-10-02T19:55:23.480230555Z" level=error msg="StartContainer for \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:23.480785 kubelet[2779]: E1002 19:55:23.480754 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7" Oct 2 19:55:23.481365 kubelet[2779]: E1002 19:55:23.480925 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:23.481365 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:23.481365 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:55:23.481365 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tpdc4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:23.481886 kubelet[2779]: E1002 19:55:23.480987 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:55:23.769000 env[1631]: time="2023-10-02T19:55:23.768888079Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:55:23.805913 kubelet[2779]: I1002 19:55:23.805743 2779 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-m2z72" podStartSLOduration=-9.223372018049194e+09 pod.CreationTimestamp="2023-10-02 19:55:05 +0000 UTC" firstStartedPulling="2023-10-02 19:55:06.137546318 +0000 UTC m=+14.117299450" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:09.725635993 +0000 UTC m=+17.705389150" watchObservedRunningTime="2023-10-02 19:55:23.805582011 +0000 UTC m=+31.785335166" Oct 2 19:55:23.810788 env[1631]: time="2023-10-02T19:55:23.810730823Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\"" Oct 2 19:55:23.814350 env[1631]: time="2023-10-02T19:55:23.814311974Z" level=info msg="StartContainer for \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\"" Oct 2 19:55:23.895417 systemd[1]: Started cri-containerd-984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592.scope. Oct 2 19:55:23.919257 systemd[1]: cri-containerd-984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592.scope: Deactivated successfully. Oct 2 19:55:23.950357 env[1631]: time="2023-10-02T19:55:23.949906358Z" level=info msg="shim disconnected" id=984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592 Oct 2 19:55:23.950357 env[1631]: time="2023-10-02T19:55:23.950359214Z" level=warning msg="cleaning up after shim disconnected" id=984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592 namespace=k8s.io Oct 2 19:55:23.950357 env[1631]: time="2023-10-02T19:55:23.950373050Z" level=info msg="cleaning up dead shim" Oct 2 19:55:23.966088 env[1631]: time="2023-10-02T19:55:23.965662609Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3245 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:23.966410 env[1631]: time="2023-10-02T19:55:23.966346760Z" level=error msg="copy shim log" error="read /proc/self/fd/54: file already closed" Oct 2 19:55:23.966836 env[1631]: time="2023-10-02T19:55:23.966763755Z" level=error msg="Failed to pipe stderr of container \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\"" error="reading from a closed fifo" Oct 2 19:55:23.968174 env[1631]: time="2023-10-02T19:55:23.968125666Z" level=error msg="Failed to pipe stdout of container \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\"" error="reading from a closed fifo" Oct 2 19:55:23.971215 env[1631]: time="2023-10-02T19:55:23.971146335Z" level=error msg="StartContainer for \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:23.971415 kubelet[2779]: E1002 19:55:23.971389 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592" Oct 2 19:55:23.971534 kubelet[2779]: E1002 19:55:23.971512 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:23.971534 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:23.971534 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:55:23.971534 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tpdc4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:23.971807 kubelet[2779]: E1002 19:55:23.971565 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:55:24.190446 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7-rootfs.mount: Deactivated successfully. Oct 2 19:55:24.773445 kubelet[2779]: I1002 19:55:24.773416 2779 scope.go:115] "RemoveContainer" containerID="4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7" Oct 2 19:55:24.774699 kubelet[2779]: I1002 19:55:24.774679 2779 scope.go:115] "RemoveContainer" containerID="4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7" Oct 2 19:55:24.776571 env[1631]: time="2023-10-02T19:55:24.776461805Z" level=info msg="RemoveContainer for \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\"" Oct 2 19:55:24.778993 env[1631]: time="2023-10-02T19:55:24.778957452Z" level=info msg="RemoveContainer for \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\"" Oct 2 19:55:24.779925 env[1631]: time="2023-10-02T19:55:24.779188743Z" level=error msg="RemoveContainer for \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\" failed" error="failed to set removing state for container \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\": container is already in removing state" Oct 2 19:55:24.780003 kubelet[2779]: E1002 19:55:24.779811 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\": container is already in removing state" containerID="4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7" Oct 2 19:55:24.780003 kubelet[2779]: E1002 19:55:24.779869 2779 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7": container is already in removing state; Skipping pod "cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)" Oct 2 19:55:24.780529 kubelet[2779]: E1002 19:55:24.780353 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:55:24.789944 env[1631]: time="2023-10-02T19:55:24.789894110Z" level=info msg="RemoveContainer for \"4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7\" returns successfully" Oct 2 19:55:25.780852 kubelet[2779]: E1002 19:55:25.778378 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:55:26.569630 kubelet[2779]: W1002 19:55:26.569566 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice/cri-containerd-4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7.scope WatchSource:0}: container "4528aa527719755ad724847aecdce9f1572dc4539d0c866c4d4485d273a8b4b7" in namespace "k8s.io": not found Oct 2 19:55:29.681186 kubelet[2779]: W1002 19:55:29.681112 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice/cri-containerd-984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592.scope WatchSource:0}: task 984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592 not found: not found Oct 2 19:55:39.610784 env[1631]: time="2023-10-02T19:55:39.610729982Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:55:39.655367 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1852334846.mount: Deactivated successfully. Oct 2 19:55:39.673270 env[1631]: time="2023-10-02T19:55:39.673199997Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\"" Oct 2 19:55:39.675588 env[1631]: time="2023-10-02T19:55:39.675547731Z" level=info msg="StartContainer for \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\"" Oct 2 19:55:39.717188 systemd[1]: Started cri-containerd-58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3.scope. Oct 2 19:55:39.749082 systemd[1]: cri-containerd-58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3.scope: Deactivated successfully. Oct 2 19:55:39.777410 env[1631]: time="2023-10-02T19:55:39.777351312Z" level=info msg="shim disconnected" id=58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3 Oct 2 19:55:39.777410 env[1631]: time="2023-10-02T19:55:39.777408339Z" level=warning msg="cleaning up after shim disconnected" id=58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3 namespace=k8s.io Oct 2 19:55:39.777827 env[1631]: time="2023-10-02T19:55:39.777420153Z" level=info msg="cleaning up dead shim" Oct 2 19:55:39.800931 env[1631]: time="2023-10-02T19:55:39.800867610Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3284 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:39Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:39.801606 env[1631]: time="2023-10-02T19:55:39.801496219Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:55:39.801826 env[1631]: time="2023-10-02T19:55:39.801780611Z" level=error msg="Failed to pipe stdout of container \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\"" error="reading from a closed fifo" Oct 2 19:55:39.804388 env[1631]: time="2023-10-02T19:55:39.804307717Z" level=error msg="Failed to pipe stderr of container \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\"" error="reading from a closed fifo" Oct 2 19:55:39.811451 env[1631]: time="2023-10-02T19:55:39.811379487Z" level=error msg="StartContainer for \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:39.811773 kubelet[2779]: E1002 19:55:39.811750 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3" Oct 2 19:55:39.812670 kubelet[2779]: E1002 19:55:39.811888 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:39.812670 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:39.812670 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:55:39.812670 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tpdc4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:39.812977 kubelet[2779]: E1002 19:55:39.811988 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:55:39.824941 kubelet[2779]: I1002 19:55:39.824709 2779 scope.go:115] "RemoveContainer" containerID="984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592" Oct 2 19:55:39.825657 kubelet[2779]: I1002 19:55:39.825557 2779 scope.go:115] "RemoveContainer" containerID="984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592" Oct 2 19:55:39.829681 env[1631]: time="2023-10-02T19:55:39.829641323Z" level=info msg="RemoveContainer for \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\"" Oct 2 19:55:39.831886 env[1631]: time="2023-10-02T19:55:39.831824090Z" level=info msg="RemoveContainer for \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\"" Oct 2 19:55:39.832379 env[1631]: time="2023-10-02T19:55:39.832339216Z" level=error msg="RemoveContainer for \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\" failed" error="failed to set removing state for container \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\": container is already in removing state" Oct 2 19:55:39.833109 kubelet[2779]: E1002 19:55:39.832679 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\": container is already in removing state" containerID="984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592" Oct 2 19:55:39.833109 kubelet[2779]: E1002 19:55:39.832719 2779 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592": container is already in removing state; Skipping pod "cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)" Oct 2 19:55:39.834044 kubelet[2779]: E1002 19:55:39.833624 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:55:39.838155 env[1631]: time="2023-10-02T19:55:39.838096019Z" level=info msg="RemoveContainer for \"984142dd98dcfb695e69e82b1cdaebb2f6d886940a7c2a6e751c5b96e85c8592\" returns successfully" Oct 2 19:55:40.639397 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3-rootfs.mount: Deactivated successfully. Oct 2 19:55:42.885349 kubelet[2779]: W1002 19:55:42.885301 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice/cri-containerd-58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3.scope WatchSource:0}: task 58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3 not found: not found Oct 2 19:55:45.306000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:45.309008 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:55:45.309230 kernel: audit: type=1400 audit(1696276545.306:1085): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:45.306000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:45.330685 kernel: audit: type=1400 audit(1696276545.306:1086): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:45.330845 kernel: audit: type=1300 audit(1696276545.306:1085): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00138d4e0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:45.306000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00138d4e0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:45.306000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:45.353159 kernel: audit: type=1327 audit(1696276545.306:1085): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:45.353418 kernel: audit: type=1300 audit(1696276545.306:1086): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001c46990 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:45.306000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001c46990 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:55:45.306000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:45.367176 kernel: audit: type=1327 audit(1696276545.306:1086): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:47.981000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:47.981000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b6c0240 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:55:48.000287 kernel: audit: type=1400 audit(1696276547.981:1087): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:48.000452 kernel: audit: type=1300 audit(1696276547.981:1087): arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b6c0240 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:55:48.000486 kernel: audit: type=1327 audit(1696276547.981:1087): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:55:47.981000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:55:47.982000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:47.982000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b6c0270 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:55:47.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:55:47.982000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:47.982000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00f87fcc0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:55:47.982000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:55:47.987000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:47.987000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b6c0330 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:55:47.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:55:47.990000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:47.990000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00b6be8d0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:55:47.990000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:55:47.990000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:47.990000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00f87fdc0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:55:47.990000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:55:48.024079 kernel: audit: type=1400 audit(1696276547.982:1088): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:53.609874 kubelet[2779]: E1002 19:55:53.609834 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:55:56.487882 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:55:56.488016 kernel: audit: type=1130 audit(1696276556.475:1093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.37:22-139.178.89.65:37414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:56.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.37:22-139.178.89.65:37414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:56.475694 systemd[1]: Started sshd@7-172.31.29.37:22-139.178.89.65:37414.service. Oct 2 19:55:56.721000 audit[3302]: USER_ACCT pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.722589 sshd[3302]: Accepted publickey for core from 139.178.89.65 port 37414 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:55:56.730191 kernel: audit: type=1101 audit(1696276556.721:1094): pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.729000 audit[3302]: CRED_ACQ pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.738084 kernel: audit: type=1103 audit(1696276556.729:1095): pid=3302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.738181 sshd[3302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:55:56.729000 audit[3302]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff805b8ee0 a2=3 a3=0 items=0 ppid=1 pid=3302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:56.750843 kernel: audit: type=1006 audit(1696276556.729:1096): pid=3302 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:55:56.751001 kernel: audit: type=1300 audit(1696276556.729:1096): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff805b8ee0 a2=3 a3=0 items=0 ppid=1 pid=3302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:56.729000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:55:56.754193 kernel: audit: type=1327 audit(1696276556.729:1096): proctitle=737368643A20636F7265205B707269765D Oct 2 19:55:56.760185 systemd[1]: Started session-8.scope. Oct 2 19:55:56.761319 systemd-logind[1624]: New session 8 of user core. Oct 2 19:55:56.782000 audit[3302]: USER_START pid=3302 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.795143 kernel: audit: type=1105 audit(1696276556.782:1097): pid=3302 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.788000 audit[3304]: CRED_ACQ pid=3304 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.802093 kernel: audit: type=1103 audit(1696276556.788:1098): pid=3304 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:57.341730 sshd[3302]: pam_unix(sshd:session): session closed for user core Oct 2 19:55:57.349000 audit[3302]: USER_END pid=3302 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:57.354377 systemd[1]: sshd@7-172.31.29.37:22-139.178.89.65:37414.service: Deactivated successfully. Oct 2 19:55:57.355799 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:55:57.359533 systemd-logind[1624]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:55:57.361198 kernel: audit: type=1106 audit(1696276557.349:1099): pid=3302 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:57.361275 systemd-logind[1624]: Removed session 8. Oct 2 19:55:57.349000 audit[3302]: CRED_DISP pid=3302 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:57.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.29.37:22-139.178.89.65:37414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:57.373884 kernel: audit: type=1104 audit(1696276557.349:1100): pid=3302 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:02.887000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:02.889539 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:02.889885 kernel: audit: type=1400 audit(1696276562.887:1102): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:02.887000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00132dfc0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:02.910587 kernel: audit: type=1300 audit(1696276562.887:1102): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00132dfc0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:02.910761 kernel: audit: type=1327 audit(1696276562.887:1102): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:02.887000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:02.898000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:02.930739 kernel: audit: type=1400 audit(1696276562.898:1103): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:02.930896 kernel: audit: type=1300 audit(1696276562.898:1103): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00132dfe0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:02.898000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00132dfe0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:02.898000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:02.962908 kernel: audit: type=1327 audit(1696276562.898:1103): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:02.909000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:02.909000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026c65a0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:03.003468 kernel: audit: type=1400 audit(1696276562.909:1104): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:03.003640 kernel: audit: type=1300 audit(1696276562.909:1104): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0026c65a0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:02.909000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:03.016903 kernel: audit: type=1327 audit(1696276562.909:1104): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:03.017181 kernel: audit: type=1400 audit(1696276562.914:1105): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:02.914000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:02.914000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002658100 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:02.914000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:06.614431 env[1631]: time="2023-10-02T19:56:06.614375516Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:56:06.636960 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3815010651.mount: Deactivated successfully. Oct 2 19:56:06.648127 env[1631]: time="2023-10-02T19:56:06.648040457Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\"" Oct 2 19:56:06.648856 env[1631]: time="2023-10-02T19:56:06.648818092Z" level=info msg="StartContainer for \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\"" Oct 2 19:56:06.691212 systemd[1]: Started cri-containerd-bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f.scope. Oct 2 19:56:06.708712 systemd[1]: cri-containerd-bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f.scope: Deactivated successfully. Oct 2 19:56:06.743910 env[1631]: time="2023-10-02T19:56:06.743852188Z" level=info msg="shim disconnected" id=bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f Oct 2 19:56:06.743910 env[1631]: time="2023-10-02T19:56:06.743908681Z" level=warning msg="cleaning up after shim disconnected" id=bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f namespace=k8s.io Oct 2 19:56:06.743910 env[1631]: time="2023-10-02T19:56:06.743919727Z" level=info msg="cleaning up dead shim" Oct 2 19:56:06.782533 env[1631]: time="2023-10-02T19:56:06.782479424Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3337 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:06Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:06.782889 env[1631]: time="2023-10-02T19:56:06.782829622Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:56:06.783149 env[1631]: time="2023-10-02T19:56:06.783111121Z" level=error msg="Failed to pipe stdout of container \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\"" error="reading from a closed fifo" Oct 2 19:56:06.783230 env[1631]: time="2023-10-02T19:56:06.783198485Z" level=error msg="Failed to pipe stderr of container \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\"" error="reading from a closed fifo" Oct 2 19:56:06.785967 env[1631]: time="2023-10-02T19:56:06.785919854Z" level=error msg="StartContainer for \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:06.786312 kubelet[2779]: E1002 19:56:06.786283 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f" Oct 2 19:56:06.787167 kubelet[2779]: E1002 19:56:06.786538 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:06.787167 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:06.787167 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:56:06.787167 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tpdc4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:06.787624 kubelet[2779]: E1002 19:56:06.786693 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:56:06.936455 kubelet[2779]: I1002 19:56:06.934759 2779 scope.go:115] "RemoveContainer" containerID="58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3" Oct 2 19:56:06.936455 kubelet[2779]: I1002 19:56:06.935316 2779 scope.go:115] "RemoveContainer" containerID="58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3" Oct 2 19:56:06.946291 env[1631]: time="2023-10-02T19:56:06.941148853Z" level=info msg="RemoveContainer for \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\"" Oct 2 19:56:06.950991 env[1631]: time="2023-10-02T19:56:06.948835066Z" level=info msg="RemoveContainer for \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\"" Oct 2 19:56:06.950991 env[1631]: time="2023-10-02T19:56:06.950672284Z" level=error msg="RemoveContainer for \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\" failed" error="rpc error: code = NotFound desc = get container info: container \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\" in namespace \"k8s.io\": not found" Oct 2 19:56:06.951213 kubelet[2779]: E1002 19:56:06.950981 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\" in namespace \"k8s.io\": not found" containerID="58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3" Oct 2 19:56:06.951213 kubelet[2779]: E1002 19:56:06.951022 2779 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3" in namespace "k8s.io": not found; Skipping pod "cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)" Oct 2 19:56:06.951741 kubelet[2779]: E1002 19:56:06.951450 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:56:06.953402 env[1631]: time="2023-10-02T19:56:06.953361329Z" level=info msg="RemoveContainer for \"58506300738096839b1a278d463ea27b5a781124c947305195f5138f573f21b3\" returns successfully" Oct 2 19:56:07.373974 systemd[1]: Started sshd@8-172.31.29.37:22-139.178.89.65:59904.service. Oct 2 19:56:07.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.37:22-139.178.89.65:59904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:07.553000 audit[3354]: USER_ACCT pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.554623 sshd[3354]: Accepted publickey for core from 139.178.89.65 port 59904 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:07.554000 audit[3354]: CRED_ACQ pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.554000 audit[3354]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee1f98af0 a2=3 a3=0 items=0 ppid=1 pid=3354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:07.554000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:07.556331 sshd[3354]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:07.561721 systemd[1]: Started session-9.scope. Oct 2 19:56:07.562239 systemd-logind[1624]: New session 9 of user core. Oct 2 19:56:07.569000 audit[3354]: USER_START pid=3354 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.571000 audit[3356]: CRED_ACQ pid=3356 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.630874 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f-rootfs.mount: Deactivated successfully. Oct 2 19:56:07.700141 update_engine[1625]: I1002 19:56:07.700042 1625 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:56:07.700141 update_engine[1625]: I1002 19:56:07.700131 1625 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:56:07.705140 update_engine[1625]: I1002 19:56:07.705102 1625 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:56:07.706099 update_engine[1625]: I1002 19:56:07.706074 1625 omaha_request_params.cc:62] Current group set to lts Oct 2 19:56:07.709973 update_engine[1625]: I1002 19:56:07.709769 1625 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:56:07.709973 update_engine[1625]: I1002 19:56:07.709792 1625 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:56:07.709973 update_engine[1625]: I1002 19:56:07.709815 1625 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:56:07.709973 update_engine[1625]: I1002 19:56:07.709861 1625 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:56:07.709973 update_engine[1625]: I1002 19:56:07.709950 1625 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:56:07.709973 update_engine[1625]: I1002 19:56:07.709957 1625 omaha_request_action.cc:269] Request: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: Oct 2 19:56:07.709973 update_engine[1625]: I1002 19:56:07.709964 1625 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:56:07.724766 update_engine[1625]: I1002 19:56:07.724725 1625 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:56:07.725095 update_engine[1625]: I1002 19:56:07.725070 1625 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:56:07.754087 locksmithd[1687]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:56:07.806878 sshd[3354]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:07.807000 audit[3354]: USER_END pid=3354 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.807000 audit[3354]: CRED_DISP pid=3354 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.810640 systemd[1]: sshd@8-172.31.29.37:22-139.178.89.65:59904.service: Deactivated successfully. Oct 2 19:56:07.811555 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:56:07.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.29.37:22-139.178.89.65:59904 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:07.812467 systemd-logind[1624]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:56:07.813485 systemd-logind[1624]: Removed session 9. Oct 2 19:56:08.954384 update_engine[1625]: I1002 19:56:08.954339 1625 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:56:08.955410 update_engine[1625]: I1002 19:56:08.954751 1625 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:56:08.955564 update_engine[1625]: I1002 19:56:08.955408 1625 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:56:09.277712 update_engine[1625]: I1002 19:56:09.275569 1625 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:56:09.277712 update_engine[1625]: I1002 19:56:09.277591 1625 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:56:09.277712 update_engine[1625]: I1002 19:56:09.277614 1625 omaha_request_action.cc:619] Omaha request response: Oct 2 19:56:09.277712 update_engine[1625]: Oct 2 19:56:09.291904 update_engine[1625]: I1002 19:56:09.291860 1625 omaha_request_action.cc:409] No update. Oct 2 19:56:09.291904 update_engine[1625]: I1002 19:56:09.291901 1625 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:56:09.291904 update_engine[1625]: I1002 19:56:09.291908 1625 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:56:09.291904 update_engine[1625]: I1002 19:56:09.291913 1625 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:56:09.291904 update_engine[1625]: I1002 19:56:09.291918 1625 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:56:09.292295 update_engine[1625]: I1002 19:56:09.291922 1625 update_attempter.cc:302] Processing Done. Oct 2 19:56:09.292295 update_engine[1625]: I1002 19:56:09.291941 1625 update_attempter.cc:338] No update. Oct 2 19:56:09.292295 update_engine[1625]: I1002 19:56:09.291956 1625 update_check_scheduler.cc:74] Next update check in 46m12s Oct 2 19:56:09.292413 locksmithd[1687]: LastCheckedTime=1696276569 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:56:09.851517 kubelet[2779]: W1002 19:56:09.851473 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice/cri-containerd-bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f.scope WatchSource:0}: task bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f not found: not found Oct 2 19:56:17.839084 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:56:17.843000 kernel: audit: type=1130 audit(1696276577.834:1115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.37:22-139.178.89.65:60978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:17.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.37:22-139.178.89.65:60978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:17.835346 systemd[1]: Started sshd@9-172.31.29.37:22-139.178.89.65:60978.service. Oct 2 19:56:18.019000 audit[3368]: USER_ACCT pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.035157 kernel: audit: type=1101 audit(1696276578.019:1116): pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.035274 sshd[3368]: Accepted publickey for core from 139.178.89.65 port 60978 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:18.035000 audit[3368]: CRED_ACQ pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.039315 sshd[3368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:18.053776 kernel: audit: type=1103 audit(1696276578.035:1117): pid=3368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.053919 kernel: audit: type=1006 audit(1696276578.037:1118): pid=3368 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:56:18.056311 systemd[1]: Started session-10.scope. Oct 2 19:56:18.057595 systemd-logind[1624]: New session 10 of user core. Oct 2 19:56:18.037000 audit[3368]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfb3d1c80 a2=3 a3=0 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:18.079722 kernel: audit: type=1300 audit(1696276578.037:1118): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfb3d1c80 a2=3 a3=0 items=0 ppid=1 pid=3368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:18.079882 kernel: audit: type=1327 audit(1696276578.037:1118): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:18.079931 kernel: audit: type=1105 audit(1696276578.075:1119): pid=3368 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.037000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:18.075000 audit[3368]: USER_START pid=3368 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.078000 audit[3370]: CRED_ACQ pid=3370 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.100453 kernel: audit: type=1103 audit(1696276578.078:1120): pid=3370 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.300726 sshd[3368]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:18.301000 audit[3368]: USER_END pid=3368 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.305466 systemd[1]: sshd@9-172.31.29.37:22-139.178.89.65:60978.service: Deactivated successfully. Oct 2 19:56:18.306478 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:56:18.309805 systemd-logind[1624]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:56:18.311928 systemd-logind[1624]: Removed session 10. Oct 2 19:56:18.301000 audit[3368]: CRED_DISP pid=3368 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.320223 kernel: audit: type=1106 audit(1696276578.301:1121): pid=3368 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.320392 kernel: audit: type=1104 audit(1696276578.301:1122): pid=3368 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:18.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.29.37:22-139.178.89.65:60978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:19.606974 kubelet[2779]: E1002 19:56:19.606935 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:56:28.334788 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:28.334992 kernel: audit: type=1130 audit(1696276588.325:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.37:22-139.178.89.65:33500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:28.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.37:22-139.178.89.65:33500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:28.326633 systemd[1]: Started sshd@10-172.31.29.37:22-139.178.89.65:33500.service. Oct 2 19:56:28.487000 audit[3381]: USER_ACCT pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.496202 kernel: audit: type=1101 audit(1696276588.487:1125): pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.496257 sshd[3381]: Accepted publickey for core from 139.178.89.65 port 33500 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:28.495000 audit[3381]: CRED_ACQ pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.497287 sshd[3381]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:28.505859 systemd[1]: Started session-11.scope. Oct 2 19:56:28.508092 kernel: audit: type=1103 audit(1696276588.495:1126): pid=3381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.508228 kernel: audit: type=1006 audit(1696276588.495:1127): pid=3381 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:56:28.508262 kernel: audit: type=1300 audit(1696276588.495:1127): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4dc615d0 a2=3 a3=0 items=0 ppid=1 pid=3381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:28.495000 audit[3381]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4dc615d0 a2=3 a3=0 items=0 ppid=1 pid=3381 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:28.508534 systemd-logind[1624]: New session 11 of user core. Oct 2 19:56:28.516630 kernel: audit: type=1327 audit(1696276588.495:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:28.495000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:28.518962 kernel: audit: type=1105 audit(1696276588.514:1128): pid=3381 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.514000 audit[3381]: USER_START pid=3381 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.529099 kernel: audit: type=1103 audit(1696276588.516:1129): pid=3383 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.516000 audit[3383]: CRED_ACQ pid=3383 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.714095 sshd[3381]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:28.719000 audit[3381]: USER_END pid=3381 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.724298 systemd[1]: sshd@10-172.31.29.37:22-139.178.89.65:33500.service: Deactivated successfully. Oct 2 19:56:28.725274 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:56:28.731454 systemd-logind[1624]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:56:28.732573 systemd-logind[1624]: Removed session 11. Oct 2 19:56:28.733135 kernel: audit: type=1106 audit(1696276588.719:1130): pid=3381 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.719000 audit[3381]: CRED_DISP pid=3381 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.29.37:22-139.178.89.65:33500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:28.741072 kernel: audit: type=1104 audit(1696276588.719:1131): pid=3381 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:30.606888 kubelet[2779]: E1002 19:56:30.606849 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:56:38.748908 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:38.749187 kernel: audit: type=1130 audit(1696276598.740:1133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.37:22-139.178.89.65:43456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:38.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.37:22-139.178.89.65:43456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:38.741349 systemd[1]: Started sshd@11-172.31.29.37:22-139.178.89.65:43456.service. Oct 2 19:56:38.911000 audit[3396]: USER_ACCT pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.912693 sshd[3396]: Accepted publickey for core from 139.178.89.65 port 43456 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:38.920903 kernel: audit: type=1101 audit(1696276598.911:1134): pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.920000 audit[3396]: CRED_ACQ pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.921840 sshd[3396]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:38.938277 kernel: audit: type=1103 audit(1696276598.920:1135): pid=3396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.938449 kernel: audit: type=1006 audit(1696276598.920:1136): pid=3396 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:56:38.938493 kernel: audit: type=1300 audit(1696276598.920:1136): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7f0de4c0 a2=3 a3=0 items=0 ppid=1 pid=3396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:38.920000 audit[3396]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7f0de4c0 a2=3 a3=0 items=0 ppid=1 pid=3396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:38.937120 systemd[1]: Started session-12.scope. Oct 2 19:56:38.940084 systemd-logind[1624]: New session 12 of user core. Oct 2 19:56:38.945828 kernel: audit: type=1327 audit(1696276598.920:1136): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:38.920000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:38.950000 audit[3396]: USER_START pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.969137 kernel: audit: type=1105 audit(1696276598.950:1137): pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.969385 kernel: audit: type=1103 audit(1696276598.956:1138): pid=3398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.956000 audit[3398]: CRED_ACQ pid=3398 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:39.162928 sshd[3396]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:39.164000 audit[3396]: USER_END pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:39.173074 kernel: audit: type=1106 audit(1696276599.164:1139): pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:39.165000 audit[3396]: CRED_DISP pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:39.176653 systemd[1]: sshd@11-172.31.29.37:22-139.178.89.65:43456.service: Deactivated successfully. Oct 2 19:56:39.177753 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:56:39.182067 kernel: audit: type=1104 audit(1696276599.165:1140): pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:39.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.29.37:22-139.178.89.65:43456 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:39.181703 systemd-logind[1624]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:56:39.183165 systemd-logind[1624]: Removed session 12. Oct 2 19:56:44.606897 kubelet[2779]: E1002 19:56:44.606851 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:56:45.307000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:45.310155 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:45.310232 kernel: audit: type=1400 audit(1696276605.307:1143): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:45.326185 kernel: audit: type=1400 audit(1696276605.307:1142): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:45.307000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:45.307000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001235740 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:45.307000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:45.375078 kernel: audit: type=1300 audit(1696276605.307:1142): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001235740 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:45.375150 kernel: audit: type=1327 audit(1696276605.307:1142): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:45.307000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0005ff160 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:45.427025 kernel: audit: type=1300 audit(1696276605.307:1143): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0005ff160 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:56:45.427196 kernel: audit: type=1327 audit(1696276605.307:1143): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:45.307000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:47.986000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:47.986000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:48.000271 kernel: audit: type=1400 audit(1696276607.986:1144): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:48.000409 kernel: audit: type=1400 audit(1696276607.986:1145): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:48.000452 kernel: audit: type=1300 audit(1696276607.986:1145): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0029eab20 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:56:47.986000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0029eab20 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:56:47.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:56:48.019282 kernel: audit: type=1327 audit(1696276607.986:1145): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:56:47.986000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:47.986000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0080a1770 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:56:47.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:56:47.987000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:47.987000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0080a18f0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:56:47.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:56:47.986000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c008c963c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:56:47.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:56:47.993000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:47.993000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0029a3e20 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:56:47.993000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:56:47.994000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:47.994000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0080a19e0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:56:47.994000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:56:49.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.37:22-139.178.89.65:41768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:49.191115 systemd[1]: Started sshd@12-172.31.29.37:22-139.178.89.65:41768.service. Oct 2 19:56:49.353000 audit[3408]: USER_ACCT pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.355190 sshd[3408]: Accepted publickey for core from 139.178.89.65 port 41768 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:49.355000 audit[3408]: CRED_ACQ pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.355000 audit[3408]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffffcfb7090 a2=3 a3=0 items=0 ppid=1 pid=3408 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:49.355000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:49.357257 sshd[3408]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:49.364095 systemd[1]: Started session-13.scope. Oct 2 19:56:49.364609 systemd-logind[1624]: New session 13 of user core. Oct 2 19:56:49.370000 audit[3408]: USER_START pid=3408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.372000 audit[3410]: CRED_ACQ pid=3410 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.579579 sshd[3408]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:49.581000 audit[3408]: USER_END pid=3408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.582000 audit[3408]: CRED_DISP pid=3408 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.585910 systemd[1]: sshd@12-172.31.29.37:22-139.178.89.65:41768.service: Deactivated successfully. Oct 2 19:56:49.586784 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:56:49.585000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.29.37:22-139.178.89.65:41768 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:49.587137 systemd-logind[1624]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:56:49.588313 systemd-logind[1624]: Removed session 13. Oct 2 19:56:52.464720 kubelet[2779]: E1002 19:56:52.464625 2779 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:56:52.633026 kubelet[2779]: E1002 19:56:52.632941 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:57.609622 env[1631]: time="2023-10-02T19:56:57.609561468Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:56:57.642427 kubelet[2779]: E1002 19:56:57.640606 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:57.642230 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3942379804.mount: Deactivated successfully. Oct 2 19:56:57.660116 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1164170847.mount: Deactivated successfully. Oct 2 19:56:57.662229 env[1631]: time="2023-10-02T19:56:57.662164586Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\"" Oct 2 19:56:57.665083 env[1631]: time="2023-10-02T19:56:57.665029366Z" level=info msg="StartContainer for \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\"" Oct 2 19:56:57.710128 systemd[1]: Started cri-containerd-2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d.scope. Oct 2 19:56:57.731511 systemd[1]: cri-containerd-2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d.scope: Deactivated successfully. Oct 2 19:56:57.762776 env[1631]: time="2023-10-02T19:56:57.762710240Z" level=info msg="shim disconnected" id=2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d Oct 2 19:56:57.762776 env[1631]: time="2023-10-02T19:56:57.762773112Z" level=warning msg="cleaning up after shim disconnected" id=2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d namespace=k8s.io Oct 2 19:56:57.762776 env[1631]: time="2023-10-02T19:56:57.762787342Z" level=info msg="cleaning up dead shim" Oct 2 19:56:57.787774 env[1631]: time="2023-10-02T19:56:57.787713103Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3448 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:57.788189 env[1631]: time="2023-10-02T19:56:57.788017853Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:56:57.788522 env[1631]: time="2023-10-02T19:56:57.788482687Z" level=error msg="Failed to pipe stdout of container \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\"" error="reading from a closed fifo" Oct 2 19:56:57.788613 env[1631]: time="2023-10-02T19:56:57.788566309Z" level=error msg="Failed to pipe stderr of container \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\"" error="reading from a closed fifo" Oct 2 19:56:57.792233 env[1631]: time="2023-10-02T19:56:57.792005323Z" level=error msg="StartContainer for \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:57.792501 kubelet[2779]: E1002 19:56:57.792475 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d" Oct 2 19:56:57.796927 kubelet[2779]: E1002 19:56:57.795207 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:57.796927 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:57.796927 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:56:57.796927 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tpdc4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:57.799711 kubelet[2779]: E1002 19:56:57.795306 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:56:58.079846 kubelet[2779]: I1002 19:56:58.078844 2779 scope.go:115] "RemoveContainer" containerID="bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f" Oct 2 19:56:58.079846 kubelet[2779]: I1002 19:56:58.079813 2779 scope.go:115] "RemoveContainer" containerID="bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f" Oct 2 19:56:58.082516 env[1631]: time="2023-10-02T19:56:58.082472196Z" level=info msg="RemoveContainer for \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\"" Oct 2 19:56:58.083170 env[1631]: time="2023-10-02T19:56:58.082506975Z" level=info msg="RemoveContainer for \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\"" Oct 2 19:56:58.083431 env[1631]: time="2023-10-02T19:56:58.083393006Z" level=error msg="RemoveContainer for \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\" failed" error="failed to set removing state for container \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\": container is already in removing state" Oct 2 19:56:58.083856 kubelet[2779]: E1002 19:56:58.083831 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\": container is already in removing state" containerID="bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f" Oct 2 19:56:58.083954 kubelet[2779]: I1002 19:56:58.083881 2779 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f} err="rpc error: code = Unknown desc = failed to set removing state for container \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\": container is already in removing state" Oct 2 19:56:58.101234 env[1631]: time="2023-10-02T19:56:58.100380978Z" level=info msg="RemoveContainer for \"bc105ba07bc2e1a0be6f3e1e0a9b9e9f5b3159721117bad995a5e5f12ed7b64f\" returns successfully" Oct 2 19:56:58.110877 kubelet[2779]: E1002 19:56:58.108044 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:56:58.641689 systemd[1]: run-containerd-runc-k8s.io-2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d-runc.vg6ZQO.mount: Deactivated successfully. Oct 2 19:56:58.641845 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d-rootfs.mount: Deactivated successfully. Oct 2 19:56:59.616156 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:56:59.616312 kernel: audit: type=1130 audit(1696276619.610:1159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.37:22-139.178.89.65:41752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:59.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.37:22-139.178.89.65:41752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:59.611042 systemd[1]: Started sshd@13-172.31.29.37:22-139.178.89.65:41752.service. Oct 2 19:56:59.794219 sshd[3463]: Accepted publickey for core from 139.178.89.65 port 41752 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:59.792000 audit[3463]: USER_ACCT pid=3463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.804376 kernel: audit: type=1101 audit(1696276619.792:1160): pid=3463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.805237 sshd[3463]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:59.803000 audit[3463]: CRED_ACQ pid=3463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.823642 kernel: audit: type=1103 audit(1696276619.803:1161): pid=3463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.823773 kernel: audit: type=1006 audit(1696276619.803:1162): pid=3463 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:56:59.823810 kernel: audit: type=1300 audit(1696276619.803:1162): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb38267f0 a2=3 a3=0 items=0 ppid=1 pid=3463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:59.803000 audit[3463]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb38267f0 a2=3 a3=0 items=0 ppid=1 pid=3463 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:59.827652 systemd[1]: Started session-14.scope. Oct 2 19:56:59.829186 systemd-logind[1624]: New session 14 of user core. Oct 2 19:56:59.835454 kernel: audit: type=1327 audit(1696276619.803:1162): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:59.803000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:59.861000 audit[3463]: USER_START pid=3463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.874653 kernel: audit: type=1105 audit(1696276619.861:1163): pid=3463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.867000 audit[3465]: CRED_ACQ pid=3465 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.884087 kernel: audit: type=1103 audit(1696276619.867:1164): pid=3465 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:00.164676 sshd[3463]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:00.165000 audit[3463]: USER_END pid=3463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:00.169817 systemd[1]: sshd@13-172.31.29.37:22-139.178.89.65:41752.service: Deactivated successfully. Oct 2 19:57:00.171164 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:57:00.175578 systemd-logind[1624]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:57:00.166000 audit[3463]: CRED_DISP pid=3463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:00.177889 systemd-logind[1624]: Removed session 14. Oct 2 19:57:00.184674 kernel: audit: type=1106 audit(1696276620.165:1165): pid=3463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:00.185494 kernel: audit: type=1104 audit(1696276620.166:1166): pid=3463 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:00.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.29.37:22-139.178.89.65:41752 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:00.872791 kubelet[2779]: W1002 19:57:00.872676 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice/cri-containerd-2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d.scope WatchSource:0}: task 2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d not found: not found Oct 2 19:57:02.642378 kubelet[2779]: E1002 19:57:02.642352 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:02.888000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:02.888000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001044fe0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:57:02.888000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:02.900000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:02.900000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e75ea0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:57:02.900000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:02.913000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:02.913000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e75ec0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:57:02.913000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:02.925000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:02.925000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e75ee0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:57:02.925000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:07.645122 kubelet[2779]: E1002 19:57:07.645030 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:10.192117 systemd[1]: Started sshd@14-172.31.29.37:22-139.178.89.65:37734.service. Oct 2 19:57:10.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.37:22-139.178.89.65:37734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:10.194011 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:57:10.194119 kernel: audit: type=1130 audit(1696276630.191:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.37:22-139.178.89.65:37734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:10.372000 audit[3480]: USER_ACCT pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.382488 sshd[3480]: Accepted publickey for core from 139.178.89.65 port 37734 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:10.381000 audit[3480]: CRED_ACQ pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.383906 sshd[3480]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:10.392570 kernel: audit: type=1101 audit(1696276630.372:1173): pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.392681 kernel: audit: type=1103 audit(1696276630.381:1174): pid=3480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.392718 kernel: audit: type=1006 audit(1696276630.381:1175): pid=3480 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:57:10.395036 systemd[1]: Started session-15.scope. Oct 2 19:57:10.381000 audit[3480]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedf159550 a2=3 a3=0 items=0 ppid=1 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:10.396717 systemd-logind[1624]: New session 15 of user core. Oct 2 19:57:10.404860 kernel: audit: type=1300 audit(1696276630.381:1175): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedf159550 a2=3 a3=0 items=0 ppid=1 pid=3480 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:10.381000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:10.412726 kernel: audit: type=1327 audit(1696276630.381:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:10.412000 audit[3480]: USER_START pid=3480 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.416000 audit[3482]: CRED_ACQ pid=3482 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.432468 kernel: audit: type=1105 audit(1696276630.412:1176): pid=3480 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.432586 kernel: audit: type=1103 audit(1696276630.416:1177): pid=3482 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.653156 sshd[3480]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:10.655000 audit[3480]: USER_END pid=3480 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.675740 kernel: audit: type=1106 audit(1696276630.655:1178): pid=3480 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.675965 kernel: audit: type=1104 audit(1696276630.656:1179): pid=3480 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.656000 audit[3480]: CRED_DISP pid=3480 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.677146 systemd[1]: sshd@14-172.31.29.37:22-139.178.89.65:37734.service: Deactivated successfully. Oct 2 19:57:10.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.29.37:22-139.178.89.65:37734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:10.678450 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:57:10.679939 systemd-logind[1624]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:57:10.683644 systemd-logind[1624]: Removed session 15. Oct 2 19:57:11.607002 kubelet[2779]: E1002 19:57:11.606668 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:57:12.646325 kubelet[2779]: E1002 19:57:12.646286 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:17.648207 kubelet[2779]: E1002 19:57:17.648171 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:20.685797 systemd[1]: Started sshd@15-172.31.29.37:22-139.178.89.65:47822.service. Oct 2 19:57:20.698008 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:20.698241 kernel: audit: type=1130 audit(1696276640.685:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.37:22-139.178.89.65:47822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:20.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.37:22-139.178.89.65:47822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:20.872000 audit[3492]: USER_ACCT pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:20.874605 sshd[3492]: Accepted publickey for core from 139.178.89.65 port 47822 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:20.882100 kernel: audit: type=1101 audit(1696276640.872:1182): pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:20.881000 audit[3492]: CRED_ACQ pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:20.883811 sshd[3492]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:20.891094 kernel: audit: type=1103 audit(1696276640.881:1183): pid=3492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:20.894438 systemd[1]: Started session-16.scope. Oct 2 19:57:20.897174 kernel: audit: type=1006 audit(1696276640.882:1184): pid=3492 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:57:20.897292 kernel: audit: type=1300 audit(1696276640.882:1184): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6f2fbe90 a2=3 a3=0 items=0 ppid=1 pid=3492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:20.882000 audit[3492]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6f2fbe90 a2=3 a3=0 items=0 ppid=1 pid=3492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:20.896161 systemd-logind[1624]: New session 16 of user core. Oct 2 19:57:20.913076 kernel: audit: type=1327 audit(1696276640.882:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:20.882000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:20.912000 audit[3492]: USER_START pid=3492 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:20.922395 kernel: audit: type=1105 audit(1696276640.912:1185): pid=3492 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:20.922531 kernel: audit: type=1103 audit(1696276640.915:1186): pid=3494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:20.915000 audit[3494]: CRED_ACQ pid=3494 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:21.179132 sshd[3492]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:21.180000 audit[3492]: USER_END pid=3492 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:21.183719 systemd[1]: sshd@15-172.31.29.37:22-139.178.89.65:47822.service: Deactivated successfully. Oct 2 19:57:21.185406 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:57:21.188204 systemd-logind[1624]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:57:21.180000 audit[3492]: CRED_DISP pid=3492 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:21.190237 systemd-logind[1624]: Removed session 16. Oct 2 19:57:21.195754 kernel: audit: type=1106 audit(1696276641.180:1187): pid=3492 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:21.195909 kernel: audit: type=1104 audit(1696276641.180:1188): pid=3492 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:21.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.29.37:22-139.178.89.65:47822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:22.606974 kubelet[2779]: E1002 19:57:22.606938 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:57:22.649710 kubelet[2779]: E1002 19:57:22.649679 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:27.651294 kubelet[2779]: E1002 19:57:27.651255 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:31.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.37:22-139.178.89.65:39100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:31.208489 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:31.208546 kernel: audit: type=1130 audit(1696276651.206:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.37:22-139.178.89.65:39100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:31.206932 systemd[1]: Started sshd@16-172.31.29.37:22-139.178.89.65:39100.service. Oct 2 19:57:31.390000 audit[3506]: USER_ACCT pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.391473 sshd[3506]: Accepted publickey for core from 139.178.89.65 port 39100 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:31.399214 kernel: audit: type=1101 audit(1696276651.390:1191): pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.398000 audit[3506]: CRED_ACQ pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.399797 sshd[3506]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:31.408330 systemd[1]: Started session-17.scope. Oct 2 19:57:31.412024 kernel: audit: type=1103 audit(1696276651.398:1192): pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.412183 kernel: audit: type=1006 audit(1696276651.398:1193): pid=3506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:57:31.411432 systemd-logind[1624]: New session 17 of user core. Oct 2 19:57:31.398000 audit[3506]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb23b5820 a2=3 a3=0 items=0 ppid=1 pid=3506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:31.398000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:31.446302 kernel: audit: type=1300 audit(1696276651.398:1193): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb23b5820 a2=3 a3=0 items=0 ppid=1 pid=3506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:31.446916 kernel: audit: type=1327 audit(1696276651.398:1193): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:31.447759 kernel: audit: type=1105 audit(1696276651.421:1194): pid=3506 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.421000 audit[3506]: USER_START pid=3506 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.431000 audit[3508]: CRED_ACQ pid=3508 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.462276 kernel: audit: type=1103 audit(1696276651.431:1195): pid=3508 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.653774 sshd[3506]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:31.655000 audit[3506]: USER_END pid=3506 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.655000 audit[3506]: CRED_DISP pid=3506 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.673126 kernel: audit: type=1106 audit(1696276651.655:1196): pid=3506 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.673246 kernel: audit: type=1104 audit(1696276651.655:1197): pid=3506 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.673637 systemd[1]: sshd@16-172.31.29.37:22-139.178.89.65:39100.service: Deactivated successfully. Oct 2 19:57:31.674964 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:57:31.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.29.37:22-139.178.89.65:39100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:31.676407 systemd-logind[1624]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:57:31.684761 systemd[1]: Started sshd@17-172.31.29.37:22-139.178.89.65:39116.service. Oct 2 19:57:31.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.37:22-139.178.89.65:39116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:31.689398 systemd-logind[1624]: Removed session 17. Oct 2 19:57:31.860000 audit[3519]: USER_ACCT pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.862194 sshd[3519]: Accepted publickey for core from 139.178.89.65 port 39116 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:31.863000 audit[3519]: CRED_ACQ pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.863000 audit[3519]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff45af6600 a2=3 a3=0 items=0 ppid=1 pid=3519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:31.863000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:31.864680 sshd[3519]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:31.872746 systemd[1]: Started session-18.scope. Oct 2 19:57:31.873352 systemd-logind[1624]: New session 18 of user core. Oct 2 19:57:31.880000 audit[3519]: USER_START pid=3519 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:31.882000 audit[3521]: CRED_ACQ pid=3521 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.653407 kubelet[2779]: E1002 19:57:32.653376 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:33.809982 sshd[3519]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:33.817000 audit[3519]: USER_END pid=3519 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:33.818000 audit[3519]: CRED_DISP pid=3519 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:33.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.29.37:22-139.178.89.65:39116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:33.825124 systemd[1]: sshd@17-172.31.29.37:22-139.178.89.65:39116.service: Deactivated successfully. Oct 2 19:57:33.828206 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:57:33.830494 systemd-logind[1624]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:57:33.845350 systemd[1]: Started sshd@18-172.31.29.37:22-139.178.89.65:39126.service. Oct 2 19:57:33.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.37:22-139.178.89.65:39126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:33.847922 systemd-logind[1624]: Removed session 18. Oct 2 19:57:34.035000 audit[3529]: USER_ACCT pid=3529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:34.037328 sshd[3529]: Accepted publickey for core from 139.178.89.65 port 39126 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:34.037000 audit[3529]: CRED_ACQ pid=3529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:34.037000 audit[3529]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea8de2af0 a2=3 a3=0 items=0 ppid=1 pid=3529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:34.037000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:34.041541 sshd[3529]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:34.052855 systemd[1]: Started session-19.scope. Oct 2 19:57:34.054764 systemd-logind[1624]: New session 19 of user core. Oct 2 19:57:34.062000 audit[3529]: USER_START pid=3529 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:34.065000 audit[3531]: CRED_ACQ pid=3531 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:34.306931 sshd[3529]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:34.308000 audit[3529]: USER_END pid=3529 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:34.309000 audit[3529]: CRED_DISP pid=3529 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:34.314239 systemd[1]: sshd@18-172.31.29.37:22-139.178.89.65:39126.service: Deactivated successfully. Oct 2 19:57:34.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.29.37:22-139.178.89.65:39126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:34.316776 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:57:34.320625 systemd-logind[1624]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:57:34.322243 systemd-logind[1624]: Removed session 19. Oct 2 19:57:37.606863 kubelet[2779]: E1002 19:57:37.606824 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:57:37.654266 kubelet[2779]: E1002 19:57:37.654215 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:42.663517 kubelet[2779]: E1002 19:57:42.663491 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:44.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.37:22-139.178.89.65:57958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:44.334838 systemd[1]: Started sshd@19-172.31.29.37:22-139.178.89.65:57958.service. Oct 2 19:57:44.339703 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:57:44.339790 kernel: audit: type=1130 audit(1696276664.335:1217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.37:22-139.178.89.65:57958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:44.511000 audit[3544]: USER_ACCT pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.513254 sshd[3544]: Accepted publickey for core from 139.178.89.65 port 57958 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:44.521126 kernel: audit: type=1101 audit(1696276664.511:1218): pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.520000 audit[3544]: CRED_ACQ pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.521981 sshd[3544]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:44.533034 kernel: audit: type=1103 audit(1696276664.520:1219): pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.533217 kernel: audit: type=1006 audit(1696276664.520:1220): pid=3544 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:57:44.520000 audit[3544]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd769b11a0 a2=3 a3=0 items=0 ppid=1 pid=3544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:44.543153 kernel: audit: type=1300 audit(1696276664.520:1220): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd769b11a0 a2=3 a3=0 items=0 ppid=1 pid=3544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:44.537501 systemd[1]: Started session-20.scope. Oct 2 19:57:44.539572 systemd-logind[1624]: New session 20 of user core. Oct 2 19:57:44.520000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:44.547622 kernel: audit: type=1327 audit(1696276664.520:1220): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:44.547708 kernel: audit: type=1105 audit(1696276664.546:1221): pid=3544 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.546000 audit[3544]: USER_START pid=3544 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.546000 audit[3546]: CRED_ACQ pid=3546 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.564525 kernel: audit: type=1103 audit(1696276664.546:1222): pid=3546 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.767982 sshd[3544]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:44.772000 audit[3544]: USER_END pid=3544 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.775891 systemd[1]: sshd@19-172.31.29.37:22-139.178.89.65:57958.service: Deactivated successfully. Oct 2 19:57:44.776856 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:57:44.779457 systemd-logind[1624]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:57:44.772000 audit[3544]: CRED_DISP pid=3544 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.781102 systemd-logind[1624]: Removed session 20. Oct 2 19:57:44.787102 kernel: audit: type=1106 audit(1696276664.772:1223): pid=3544 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.787257 kernel: audit: type=1104 audit(1696276664.772:1224): pid=3544 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:44.775000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.29.37:22-139.178.89.65:57958 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:45.308000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:45.308000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:45.308000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0020109c0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:57:45.308000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:45.308000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00277c540 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:57:45.308000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:47.668438 kubelet[2779]: E1002 19:57:47.668401 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:47.986000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:47.986000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:47.986000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0056e8240 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:57:47.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:57:47.986000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c002d6a280 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:57:47.986000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:57:47.988000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:47.988000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00cb9bf20 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:57:47.988000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:57:47.989000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:47.989000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0057c8030 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:57:47.989000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:57:47.994000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:47.994000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:47.994000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c002d2b5c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:57:47.994000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:57:47.994000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0057c8180 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:57:47.994000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:57:51.606492 kubelet[2779]: E1002 19:57:51.606458 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:57:52.672466 kubelet[2779]: E1002 19:57:52.672438 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:54.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.37:22-139.178.89.65:33200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:54.805074 systemd[1]: Started sshd@20-172.31.29.37:22-139.178.89.65:33200.service. Oct 2 19:57:54.807153 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:57:54.807196 kernel: audit: type=1130 audit(1696276674.804:1234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.37:22-139.178.89.65:33200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:55.009000 audit[3558]: USER_ACCT pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.011156 sshd[3558]: Accepted publickey for core from 139.178.89.65 port 33200 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:55.017170 kernel: audit: type=1101 audit(1696276675.009:1235): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.016000 audit[3558]: CRED_ACQ pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.018306 sshd[3558]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:55.030073 kernel: audit: type=1103 audit(1696276675.016:1236): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.045180 kernel: audit: type=1006 audit(1696276675.016:1237): pid=3558 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:57:55.045348 kernel: audit: type=1300 audit(1696276675.016:1237): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff230eb290 a2=3 a3=0 items=0 ppid=1 pid=3558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:55.016000 audit[3558]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff230eb290 a2=3 a3=0 items=0 ppid=1 pid=3558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:55.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:55.050168 kernel: audit: type=1327 audit(1696276675.016:1237): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:55.053148 systemd-logind[1624]: New session 21 of user core. Oct 2 19:57:55.054155 systemd[1]: Started session-21.scope. Oct 2 19:57:55.061000 audit[3558]: USER_START pid=3558 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.070079 kernel: audit: type=1105 audit(1696276675.061:1238): pid=3558 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.070000 audit[3560]: CRED_ACQ pid=3560 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.079081 kernel: audit: type=1103 audit(1696276675.070:1239): pid=3560 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.268485 sshd[3558]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:55.269000 audit[3558]: USER_END pid=3558 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.278077 kernel: audit: type=1106 audit(1696276675.269:1240): pid=3558 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.269000 audit[3558]: CRED_DISP pid=3558 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:55.279421 systemd-logind[1624]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:57:55.281622 systemd[1]: sshd@20-172.31.29.37:22-139.178.89.65:33200.service: Deactivated successfully. Oct 2 19:57:55.282587 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:57:55.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.29.37:22-139.178.89.65:33200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:55.284528 systemd-logind[1624]: Removed session 21. Oct 2 19:57:55.285087 kernel: audit: type=1104 audit(1696276675.269:1241): pid=3558 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:57.674186 kubelet[2779]: E1002 19:57:57.674158 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:02.607323 kubelet[2779]: E1002 19:58:02.607285 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:58:02.675669 kubelet[2779]: E1002 19:58:02.675628 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:02.888000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.891124 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:02.891228 kernel: audit: type=1400 audit(1696276682.888:1243): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.888000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002560180 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:02.920261 kernel: audit: type=1300 audit(1696276682.888:1243): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002560180 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:02.920416 kernel: audit: type=1327 audit(1696276682.888:1243): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:02.888000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:02.904000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.938686 kernel: audit: type=1400 audit(1696276682.904:1244): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.938815 kernel: audit: type=1300 audit(1696276682.904:1244): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025601a0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:02.904000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025601a0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:02.904000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:02.952809 kernel: audit: type=1327 audit(1696276682.904:1244): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:02.952929 kernel: audit: type=1400 audit(1696276682.913:1245): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.913000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.913000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024d8020 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:02.967521 kernel: audit: type=1300 audit(1696276682.913:1245): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0024d8020 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:02.967648 kernel: audit: type=1327 audit(1696276682.913:1245): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:02.913000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:02.926000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.980385 kernel: audit: type=1400 audit(1696276682.926:1246): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:02.926000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025602c0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:02.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:05.299589 systemd[1]: Started sshd@21-172.31.29.37:22-139.178.89.65:46406.service. Oct 2 19:58:05.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.37:22-139.178.89.65:46406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:05.480000 audit[3570]: USER_ACCT pid=3570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:05.483274 sshd[3570]: Accepted publickey for core from 139.178.89.65 port 46406 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:05.486000 audit[3570]: CRED_ACQ pid=3570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:05.486000 audit[3570]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7e06a8c0 a2=3 a3=0 items=0 ppid=1 pid=3570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:05.486000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:05.488306 sshd[3570]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:05.501730 systemd[1]: Started session-22.scope. Oct 2 19:58:05.502463 systemd-logind[1624]: New session 22 of user core. Oct 2 19:58:05.515000 audit[3570]: USER_START pid=3570 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:05.518000 audit[3572]: CRED_ACQ pid=3572 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:05.802765 sshd[3570]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:05.803000 audit[3570]: USER_END pid=3570 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:05.810000 audit[3570]: CRED_DISP pid=3570 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:05.818002 systemd[1]: sshd@21-172.31.29.37:22-139.178.89.65:46406.service: Deactivated successfully. Oct 2 19:58:05.817000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.29.37:22-139.178.89.65:46406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:05.819446 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:58:05.820439 systemd-logind[1624]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:58:05.821549 systemd-logind[1624]: Removed session 22. Oct 2 19:58:07.678002 kubelet[2779]: E1002 19:58:07.677965 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:12.679559 kubelet[2779]: E1002 19:58:12.679517 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:14.607081 kubelet[2779]: E1002 19:58:14.607028 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:58:15.836222 systemd[1]: Started sshd@22-172.31.29.37:22-139.178.89.65:42142.service. Oct 2 19:58:15.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.37:22-139.178.89.65:42142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:15.837700 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:58:15.837779 kernel: audit: type=1130 audit(1696276695.835:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.37:22-139.178.89.65:42142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:16.011000 audit[3584]: USER_ACCT pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.012998 sshd[3584]: Accepted publickey for core from 139.178.89.65 port 42142 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:16.018000 audit[3584]: CRED_ACQ pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.021031 sshd[3584]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:16.027506 kernel: audit: type=1101 audit(1696276696.011:1257): pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.027676 kernel: audit: type=1103 audit(1696276696.018:1258): pid=3584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.027724 kernel: audit: type=1006 audit(1696276696.019:1259): pid=3584 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:58:16.019000 audit[3584]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7193f100 a2=3 a3=0 items=0 ppid=1 pid=3584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:16.041694 systemd[1]: Started session-23.scope. Oct 2 19:58:16.043691 kernel: audit: type=1300 audit(1696276696.019:1259): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7193f100 a2=3 a3=0 items=0 ppid=1 pid=3584 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:16.044125 kernel: audit: type=1327 audit(1696276696.019:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:16.019000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:16.045831 systemd-logind[1624]: New session 23 of user core. Oct 2 19:58:16.054000 audit[3584]: USER_START pid=3584 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.057000 audit[3586]: CRED_ACQ pid=3586 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.081516 kernel: audit: type=1105 audit(1696276696.054:1260): pid=3584 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.081661 kernel: audit: type=1103 audit(1696276696.057:1261): pid=3586 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.267035 sshd[3584]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:16.273000 audit[3584]: USER_END pid=3584 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.275000 audit[3584]: CRED_DISP pid=3584 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.296076 systemd[1]: sshd@22-172.31.29.37:22-139.178.89.65:42142.service: Deactivated successfully. Oct 2 19:58:16.297547 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:58:16.301201 systemd-logind[1624]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:58:16.302118 kernel: audit: type=1106 audit(1696276696.273:1262): pid=3584 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.302173 kernel: audit: type=1104 audit(1696276696.275:1263): pid=3584 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:16.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.29.37:22-139.178.89.65:42142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:16.303735 systemd-logind[1624]: Removed session 23. Oct 2 19:58:17.681067 kubelet[2779]: E1002 19:58:17.680929 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:22.683995 kubelet[2779]: E1002 19:58:22.683339 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:26.309216 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:26.309417 kernel: audit: type=1130 audit(1696276706.296:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.37:22-139.178.89.65:56350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:26.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.37:22-139.178.89.65:56350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:26.297382 systemd[1]: Started sshd@23-172.31.29.37:22-139.178.89.65:56350.service. Oct 2 19:58:26.471000 audit[3596]: USER_ACCT pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.481123 kernel: audit: type=1101 audit(1696276706.471:1266): pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.481186 sshd[3596]: Accepted publickey for core from 139.178.89.65 port 56350 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:26.479000 audit[3596]: CRED_ACQ pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.481690 sshd[3596]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:26.491112 kernel: audit: type=1103 audit(1696276706.479:1267): pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.491256 kernel: audit: type=1006 audit(1696276706.480:1268): pid=3596 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:58:26.480000 audit[3596]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4ea0f400 a2=3 a3=0 items=0 ppid=1 pid=3596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:26.514775 systemd[1]: Started session-24.scope. Oct 2 19:58:26.515933 kernel: audit: type=1300 audit(1696276706.480:1268): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4ea0f400 a2=3 a3=0 items=0 ppid=1 pid=3596 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:26.515990 kernel: audit: type=1327 audit(1696276706.480:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:26.480000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:26.517876 systemd-logind[1624]: New session 24 of user core. Oct 2 19:58:26.528000 audit[3596]: USER_START pid=3596 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.543110 kernel: audit: type=1105 audit(1696276706.528:1269): pid=3596 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.528000 audit[3598]: CRED_ACQ pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.551268 kernel: audit: type=1103 audit(1696276706.528:1270): pid=3598 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.761588 sshd[3596]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:26.771000 audit[3596]: USER_END pid=3596 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.778823 systemd[1]: sshd@23-172.31.29.37:22-139.178.89.65:56350.service: Deactivated successfully. Oct 2 19:58:26.780246 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:58:26.771000 audit[3596]: CRED_DISP pid=3596 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.782145 systemd-logind[1624]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:58:26.785020 systemd-logind[1624]: Removed session 24. Oct 2 19:58:26.790016 kernel: audit: type=1106 audit(1696276706.771:1271): pid=3596 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.790167 kernel: audit: type=1104 audit(1696276706.771:1272): pid=3596 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:26.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.29.37:22-139.178.89.65:56350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:27.684798 kubelet[2779]: E1002 19:58:27.684725 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:29.613617 env[1631]: time="2023-10-02T19:58:29.613444163Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:58:29.636815 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2833986488.mount: Deactivated successfully. Oct 2 19:58:29.652627 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2171500926.mount: Deactivated successfully. Oct 2 19:58:29.654818 env[1631]: time="2023-10-02T19:58:29.654677323Z" level=info msg="CreateContainer within sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\"" Oct 2 19:58:29.655654 env[1631]: time="2023-10-02T19:58:29.655487219Z" level=info msg="StartContainer for \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\"" Oct 2 19:58:29.711354 systemd[1]: Started cri-containerd-0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b.scope. Oct 2 19:58:29.741441 systemd[1]: cri-containerd-0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b.scope: Deactivated successfully. Oct 2 19:58:29.754214 env[1631]: time="2023-10-02T19:58:29.754149930Z" level=info msg="shim disconnected" id=0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b Oct 2 19:58:29.754606 env[1631]: time="2023-10-02T19:58:29.754207564Z" level=warning msg="cleaning up after shim disconnected" id=0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b namespace=k8s.io Oct 2 19:58:29.754606 env[1631]: time="2023-10-02T19:58:29.754371291Z" level=info msg="cleaning up dead shim" Oct 2 19:58:29.771145 env[1631]: time="2023-10-02T19:58:29.771096894Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3631 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:58:29Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:58:29.771440 env[1631]: time="2023-10-02T19:58:29.771374966Z" level=error msg="copy shim log" error="read /proc/self/fd/47: file already closed" Oct 2 19:58:29.771848 env[1631]: time="2023-10-02T19:58:29.771760775Z" level=error msg="Failed to pipe stderr of container \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\"" error="reading from a closed fifo" Oct 2 19:58:29.772162 env[1631]: time="2023-10-02T19:58:29.772123470Z" level=error msg="Failed to pipe stdout of container \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\"" error="reading from a closed fifo" Oct 2 19:58:29.774756 env[1631]: time="2023-10-02T19:58:29.774705684Z" level=error msg="StartContainer for \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:58:29.775186 kubelet[2779]: E1002 19:58:29.775146 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b" Oct 2 19:58:29.775576 kubelet[2779]: E1002 19:58:29.775270 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:58:29.775576 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:58:29.775576 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:58:29.775576 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-tpdc4,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:58:29.775726 kubelet[2779]: E1002 19:58:29.775323 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:58:30.338192 kubelet[2779]: I1002 19:58:30.338155 2779 scope.go:115] "RemoveContainer" containerID="2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d" Oct 2 19:58:30.338791 kubelet[2779]: I1002 19:58:30.338667 2779 scope.go:115] "RemoveContainer" containerID="2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d" Oct 2 19:58:30.340143 env[1631]: time="2023-10-02T19:58:30.339938448Z" level=info msg="RemoveContainer for \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\"" Oct 2 19:58:30.340515 env[1631]: time="2023-10-02T19:58:30.340198485Z" level=info msg="RemoveContainer for \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\"" Oct 2 19:58:30.340794 env[1631]: time="2023-10-02T19:58:30.340758060Z" level=error msg="RemoveContainer for \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\" failed" error="failed to set removing state for container \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\": container is already in removing state" Oct 2 19:58:30.341067 kubelet[2779]: E1002 19:58:30.340995 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\": container is already in removing state" containerID="2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d" Oct 2 19:58:30.341067 kubelet[2779]: I1002 19:58:30.341037 2779 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d} err="rpc error: code = Unknown desc = failed to set removing state for container \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\": container is already in removing state" Oct 2 19:58:30.348325 env[1631]: time="2023-10-02T19:58:30.348276676Z" level=info msg="RemoveContainer for \"2d3d22ab05aaf7dd602346643c220f3e28ed02acc34f0a845138bbea86f4660d\" returns successfully" Oct 2 19:58:30.349240 kubelet[2779]: E1002 19:58:30.349210 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:58:30.631661 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b-rootfs.mount: Deactivated successfully. Oct 2 19:58:32.686206 kubelet[2779]: E1002 19:58:32.686167 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:32.861003 kubelet[2779]: W1002 19:58:32.860953 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice/cri-containerd-0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b.scope WatchSource:0}: task 0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b not found: not found Oct 2 19:58:36.789406 systemd[1]: Started sshd@24-172.31.29.37:22-139.178.89.65:58654.service. Oct 2 19:58:36.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.37:22-139.178.89.65:58654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:36.792164 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:36.792262 kernel: audit: type=1130 audit(1696276716.788:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.37:22-139.178.89.65:58654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:36.993000 audit[3648]: USER_ACCT pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.001218 kernel: audit: type=1101 audit(1696276716.993:1275): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.001272 sshd[3648]: Accepted publickey for core from 139.178.89.65 port 58654 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:37.000000 audit[3648]: CRED_ACQ pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.002366 sshd[3648]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:37.013525 kernel: audit: type=1103 audit(1696276717.000:1276): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.013829 kernel: audit: type=1006 audit(1696276717.000:1277): pid=3648 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:58:37.000000 audit[3648]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe30384310 a2=3 a3=0 items=0 ppid=1 pid=3648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:37.000000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:37.023345 kernel: audit: type=1300 audit(1696276717.000:1277): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe30384310 a2=3 a3=0 items=0 ppid=1 pid=3648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:37.023536 kernel: audit: type=1327 audit(1696276717.000:1277): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:37.030862 systemd[1]: Started session-25.scope. Oct 2 19:58:37.032106 systemd-logind[1624]: New session 25 of user core. Oct 2 19:58:37.037000 audit[3648]: USER_START pid=3648 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.037000 audit[3650]: CRED_ACQ pid=3650 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.056346 kernel: audit: type=1105 audit(1696276717.037:1278): pid=3648 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.056503 kernel: audit: type=1103 audit(1696276717.037:1279): pid=3650 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.286194 sshd[3648]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:37.287000 audit[3648]: USER_END pid=3648 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.287000 audit[3648]: CRED_DISP pid=3648 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.309618 systemd[1]: sshd@24-172.31.29.37:22-139.178.89.65:58654.service: Deactivated successfully. Oct 2 19:58:37.310760 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:58:37.313351 kernel: audit: type=1106 audit(1696276717.287:1280): pid=3648 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.313556 kernel: audit: type=1104 audit(1696276717.287:1281): pid=3648 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:37.309000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.29.37:22-139.178.89.65:58654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:37.312829 systemd-logind[1624]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:58:37.314444 systemd-logind[1624]: Removed session 25. Oct 2 19:58:37.688487 kubelet[2779]: E1002 19:58:37.688203 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:42.607516 kubelet[2779]: E1002 19:58:42.607482 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:58:42.690007 kubelet[2779]: E1002 19:58:42.689973 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:45.309000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:45.312012 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:45.312146 kernel: audit: type=1400 audit(1696276725.309:1283): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:45.309000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:45.325886 kernel: audit: type=1400 audit(1696276725.309:1284): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:45.326334 kernel: audit: type=1300 audit(1696276725.309:1283): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015f3660 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:45.309000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0015f3660 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:45.309000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:45.348102 kernel: audit: type=1327 audit(1696276725.309:1283): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:45.348324 kernel: audit: type=1300 audit(1696276725.309:1284): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00232cc00 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:45.309000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00232cc00 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:58:45.309000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:45.367589 kernel: audit: type=1327 audit(1696276725.309:1284): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:47.315302 systemd[1]: Started sshd@25-172.31.29.37:22-139.178.89.65:38516.service. Oct 2 19:58:47.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.37:22-139.178.89.65:38516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:47.326203 kernel: audit: type=1130 audit(1696276727.314:1285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.37:22-139.178.89.65:38516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:47.492000 audit[3660]: USER_ACCT pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.493863 sshd[3660]: Accepted publickey for core from 139.178.89.65 port 38516 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:47.502237 kernel: audit: type=1101 audit(1696276727.492:1286): pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.503000 audit[3660]: CRED_ACQ pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.507263 sshd[3660]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:47.514361 kernel: audit: type=1103 audit(1696276727.503:1287): pid=3660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.523232 kernel: audit: type=1006 audit(1696276727.504:1288): pid=3660 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:58:47.504000 audit[3660]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc37910610 a2=3 a3=0 items=0 ppid=1 pid=3660 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:47.504000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:47.522234 systemd[1]: Started session-26.scope. Oct 2 19:58:47.525529 systemd-logind[1624]: New session 26 of user core. Oct 2 19:58:47.535000 audit[3660]: USER_START pid=3660 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.537000 audit[3662]: CRED_ACQ pid=3662 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.697118 kubelet[2779]: E1002 19:58:47.696920 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:47.806407 sshd[3660]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:47.806000 audit[3660]: USER_END pid=3660 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.807000 audit[3660]: CRED_DISP pid=3660 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.810252 systemd[1]: sshd@25-172.31.29.37:22-139.178.89.65:38516.service: Deactivated successfully. Oct 2 19:58:47.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.29.37:22-139.178.89.65:38516 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:47.811411 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:58:47.812604 systemd-logind[1624]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:58:47.815012 systemd-logind[1624]: Removed session 26. Oct 2 19:58:47.988000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:47.988000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:47.988000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c002b732a0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:58:47.988000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:58:47.988000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f3684b0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:58:47.988000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:58:47.989000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:47.989000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f2e9920 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:58:47.989000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:58:47.989000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:47.989000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00f2e9950 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:58:47.989000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:58:47.996000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:47.996000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:47.996000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c001a5d600 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:58:47.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:58:47.996000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00f2e9a70 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:58:47.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:58:52.701918 kubelet[2779]: E1002 19:58:52.701886 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:56.606601 kubelet[2779]: E1002 19:58:56.606548 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-jbllf_kube-system(5d8300eb-8d6b-43c7-b224-ad18e1860402)\"" pod="kube-system/cilium-jbllf" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 Oct 2 19:58:56.857260 amazon-ssm-agent[1612]: 2023-10-02 19:58:56 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:58:56.958703 amazon-ssm-agent[1612]: 2023-10-02 19:58:56 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0606a681ad7a1c90e is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0606a681ad7a1c90e because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:58:56.958703 amazon-ssm-agent[1612]: status code: 400, request id: 7197d761-df06-4fef-bdb1-10d9d80ba7b6 Oct 2 19:58:57.702724 kubelet[2779]: E1002 19:58:57.702690 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:57.843324 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:58:57.843483 kernel: audit: type=1130 audit(1696276737.834:1300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.37:22-139.178.89.65:47946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:57.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.37:22-139.178.89.65:47946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:57.834965 systemd[1]: Started sshd@26-172.31.29.37:22-139.178.89.65:47946.service. Oct 2 19:58:58.005000 audit[3675]: USER_ACCT pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.016000 audit[3675]: CRED_ACQ pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.018980 sshd[3675]: Accepted publickey for core from 139.178.89.65 port 47946 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:58.018286 sshd[3675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:58.024431 kernel: audit: type=1101 audit(1696276738.005:1301): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.024554 kernel: audit: type=1103 audit(1696276738.016:1302): pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.016000 audit[3675]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc50b5fb20 a2=3 a3=0 items=0 ppid=1 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:58.039663 kernel: audit: type=1006 audit(1696276738.016:1303): pid=3675 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:58:58.039830 kernel: audit: type=1300 audit(1696276738.016:1303): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc50b5fb20 a2=3 a3=0 items=0 ppid=1 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:58.043113 kernel: audit: type=1327 audit(1696276738.016:1303): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:58.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:58.038494 systemd[1]: Started session-27.scope. Oct 2 19:58:58.044829 systemd-logind[1624]: New session 27 of user core. Oct 2 19:58:58.050000 audit[3675]: USER_START pid=3675 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.063076 kernel: audit: type=1105 audit(1696276738.050:1304): pid=3675 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.063218 kernel: audit: type=1103 audit(1696276738.054:1305): pid=3679 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.054000 audit[3679]: CRED_ACQ pid=3679 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.285680 sshd[3675]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:58.293000 audit[3675]: USER_END pid=3675 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.293000 audit[3675]: CRED_DISP pid=3675 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.309571 systemd[1]: sshd@26-172.31.29.37:22-139.178.89.65:47946.service: Deactivated successfully. Oct 2 19:58:58.312119 kernel: audit: type=1106 audit(1696276738.293:1306): pid=3675 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.312196 kernel: audit: type=1104 audit(1696276738.293:1307): pid=3675 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:58.310682 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:58:58.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.29.37:22-139.178.89.65:47946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:58.313346 systemd-logind[1624]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:58:58.314526 systemd-logind[1624]: Removed session 27. Oct 2 19:59:02.704009 kubelet[2779]: E1002 19:59:02.703975 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:02.891000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.894153 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:59:02.894217 kernel: audit: type=1400 audit(1696276742.891:1309): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.891000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0005ff9e0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:02.914474 kernel: audit: type=1300 audit(1696276742.891:1309): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0005ff9e0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:02.914629 kernel: audit: type=1327 audit(1696276742.891:1309): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:02.891000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:02.905000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.933476 kernel: audit: type=1400 audit(1696276742.905:1310): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.933633 kernel: audit: type=1300 audit(1696276742.905:1310): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00027e220 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:02.905000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00027e220 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:02.905000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:02.947449 kernel: audit: type=1327 audit(1696276742.905:1310): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:02.947563 kernel: audit: type=1400 audit(1696276742.915:1311): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.915000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.915000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe6fc0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:02.959861 kernel: audit: type=1300 audit(1696276742.915:1311): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe6fc0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:02.960088 kernel: audit: type=1327 audit(1696276742.915:1311): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:02.915000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:02.928000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.972472 kernel: audit: type=1400 audit(1696276742.928:1312): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:02.928000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fe70e0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:02.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:07.705552 kubelet[2779]: E1002 19:59:07.705382 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:08.324178 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:59:08.324333 kernel: audit: type=1130 audit(1696276748.317:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.37:22-139.178.89.65:50766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:08.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.37:22-139.178.89.65:50766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:08.318436 systemd[1]: Started sshd@27-172.31.29.37:22-139.178.89.65:50766.service. Oct 2 19:59:08.524000 audit[3692]: USER_ACCT pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.526160 sshd[3692]: Accepted publickey for core from 139.178.89.65 port 50766 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:59:08.538215 kernel: audit: type=1101 audit(1696276748.524:1314): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.537000 audit[3692]: CRED_ACQ pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.539440 sshd[3692]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:08.549290 kernel: audit: type=1103 audit(1696276748.537:1315): pid=3692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.550933 systemd[1]: Started session-28.scope. Oct 2 19:59:08.553456 systemd-logind[1624]: New session 28 of user core. Oct 2 19:59:08.555286 kernel: audit: type=1006 audit(1696276748.537:1316): pid=3692 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:59:08.537000 audit[3692]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3fccd160 a2=3 a3=0 items=0 ppid=1 pid=3692 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:08.565192 kernel: audit: type=1300 audit(1696276748.537:1316): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3fccd160 a2=3 a3=0 items=0 ppid=1 pid=3692 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:08.565340 kernel: audit: type=1327 audit(1696276748.537:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:08.537000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:08.563000 audit[3692]: USER_START pid=3692 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.585493 kernel: audit: type=1105 audit(1696276748.563:1317): pid=3692 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.585663 kernel: audit: type=1103 audit(1696276748.567:1318): pid=3694 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.567000 audit[3694]: CRED_ACQ pid=3694 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.778370 sshd[3692]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:08.778000 audit[3692]: USER_END pid=3692 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.783432 systemd[1]: sshd@27-172.31.29.37:22-139.178.89.65:50766.service: Deactivated successfully. Oct 2 19:59:08.784495 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:59:08.787453 systemd-logind[1624]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:59:08.778000 audit[3692]: CRED_DISP pid=3692 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.789185 systemd-logind[1624]: Removed session 28. Oct 2 19:59:08.794175 kernel: audit: type=1106 audit(1696276748.778:1319): pid=3692 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.794353 kernel: audit: type=1104 audit(1696276748.778:1320): pid=3692 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.29.37:22-139.178.89.65:50766 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:08.807578 systemd[1]: Started sshd@28-172.31.29.37:22-139.178.89.65:50780.service. Oct 2 19:59:08.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.37:22-139.178.89.65:50780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:08.980000 audit[3704]: USER_ACCT pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.982491 sshd[3704]: Accepted publickey for core from 139.178.89.65 port 50780 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:59:08.983000 audit[3704]: CRED_ACQ pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:08.983000 audit[3704]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffebcefe90 a2=3 a3=0 items=0 ppid=1 pid=3704 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:08.983000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:08.985259 sshd[3704]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:08.993281 systemd-logind[1624]: New session 29 of user core. Oct 2 19:59:08.994418 systemd[1]: Started session-29.scope. Oct 2 19:59:09.008000 audit[3704]: USER_START pid=3704 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:09.010000 audit[3706]: CRED_ACQ pid=3706 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:10.533551 env[1631]: time="2023-10-02T19:59:10.524607085Z" level=info msg="StopPodSandbox for \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\"" Oct 2 19:59:10.533551 env[1631]: time="2023-10-02T19:59:10.524746689Z" level=info msg="Container to stop \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:10.532287 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816-shm.mount: Deactivated successfully. Oct 2 19:59:10.549000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:59:10.550686 systemd[1]: cri-containerd-62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816.scope: Deactivated successfully. Oct 2 19:59:10.553000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:59:10.601299 env[1631]: time="2023-10-02T19:59:10.601255738Z" level=info msg="StopContainer for \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\" with timeout 30 (s)" Oct 2 19:59:10.603013 env[1631]: time="2023-10-02T19:59:10.602972516Z" level=info msg="Stop container \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\" with signal terminated" Oct 2 19:59:10.626614 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816-rootfs.mount: Deactivated successfully. Oct 2 19:59:10.661000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:59:10.661447 systemd[1]: cri-containerd-8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090.scope: Deactivated successfully. Oct 2 19:59:10.668000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:59:10.691503 env[1631]: time="2023-10-02T19:59:10.691445168Z" level=info msg="shim disconnected" id=62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816 Oct 2 19:59:10.691503 env[1631]: time="2023-10-02T19:59:10.691504759Z" level=warning msg="cleaning up after shim disconnected" id=62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816 namespace=k8s.io Oct 2 19:59:10.691819 env[1631]: time="2023-10-02T19:59:10.691517963Z" level=info msg="cleaning up dead shim" Oct 2 19:59:10.723184 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090-rootfs.mount: Deactivated successfully. Oct 2 19:59:10.729918 env[1631]: time="2023-10-02T19:59:10.729863188Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3743 runtime=io.containerd.runc.v2\n" Oct 2 19:59:10.731825 env[1631]: time="2023-10-02T19:59:10.730796793Z" level=info msg="TearDown network for sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" successfully" Oct 2 19:59:10.731825 env[1631]: time="2023-10-02T19:59:10.730822642Z" level=info msg="StopPodSandbox for \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" returns successfully" Oct 2 19:59:10.738482 env[1631]: time="2023-10-02T19:59:10.737888133Z" level=info msg="shim disconnected" id=8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090 Oct 2 19:59:10.738713 env[1631]: time="2023-10-02T19:59:10.738487155Z" level=warning msg="cleaning up after shim disconnected" id=8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090 namespace=k8s.io Oct 2 19:59:10.738713 env[1631]: time="2023-10-02T19:59:10.738504843Z" level=info msg="cleaning up dead shim" Oct 2 19:59:10.755221 env[1631]: time="2023-10-02T19:59:10.755171178Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3760 runtime=io.containerd.runc.v2\n" Oct 2 19:59:10.760928 env[1631]: time="2023-10-02T19:59:10.760860509Z" level=info msg="StopContainer for \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\" returns successfully" Oct 2 19:59:10.761582 env[1631]: time="2023-10-02T19:59:10.761548560Z" level=info msg="StopPodSandbox for \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\"" Oct 2 19:59:10.761694 env[1631]: time="2023-10-02T19:59:10.761612719Z" level=info msg="Container to stop \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:10.763745 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938-shm.mount: Deactivated successfully. Oct 2 19:59:10.779377 systemd[1]: cri-containerd-2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938.scope: Deactivated successfully. Oct 2 19:59:10.778000 audit: BPF prog-id=112 op=UNLOAD Oct 2 19:59:10.783000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:59:10.835715 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938-rootfs.mount: Deactivated successfully. Oct 2 19:59:10.847976 env[1631]: time="2023-10-02T19:59:10.847921075Z" level=info msg="shim disconnected" id=2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938 Oct 2 19:59:10.848255 env[1631]: time="2023-10-02T19:59:10.847982277Z" level=warning msg="cleaning up after shim disconnected" id=2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938 namespace=k8s.io Oct 2 19:59:10.848255 env[1631]: time="2023-10-02T19:59:10.847994883Z" level=info msg="cleaning up dead shim" Oct 2 19:59:10.857739 env[1631]: time="2023-10-02T19:59:10.857683243Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3792 runtime=io.containerd.runc.v2\n" Oct 2 19:59:10.858089 env[1631]: time="2023-10-02T19:59:10.858030416Z" level=info msg="TearDown network for sandbox \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" successfully" Oct 2 19:59:10.858190 env[1631]: time="2023-10-02T19:59:10.858087096Z" level=info msg="StopPodSandbox for \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" returns successfully" Oct 2 19:59:10.866174 kubelet[2779]: I1002 19:59:10.866143 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-bpf-maps\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.866856 kubelet[2779]: I1002 19:59:10.866199 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-tpdc4\" (UniqueName: \"kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-kube-api-access-tpdc4\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.866856 kubelet[2779]: I1002 19:59:10.866224 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-cgroup\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.866856 kubelet[2779]: I1002 19:59:10.866255 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5d8300eb-8d6b-43c7-b224-ad18e1860402-clustermesh-secrets\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.866856 kubelet[2779]: I1002 19:59:10.866280 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-hostproc\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.866856 kubelet[2779]: I1002 19:59:10.866310 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-lib-modules\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.866856 kubelet[2779]: I1002 19:59:10.866344 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-hubble-tls\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867254 kubelet[2779]: I1002 19:59:10.866380 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cni-path\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867254 kubelet[2779]: I1002 19:59:10.866407 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-run\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867254 kubelet[2779]: I1002 19:59:10.866433 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-xtables-lock\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867254 kubelet[2779]: I1002 19:59:10.866462 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-kernel\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867254 kubelet[2779]: I1002 19:59:10.866490 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-etc-cni-netd\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867254 kubelet[2779]: I1002 19:59:10.866704 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-config-path\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867540 kubelet[2779]: I1002 19:59:10.866743 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-net\") pod \"5d8300eb-8d6b-43c7-b224-ad18e1860402\" (UID: \"5d8300eb-8d6b-43c7-b224-ad18e1860402\") " Oct 2 19:59:10.867540 kubelet[2779]: I1002 19:59:10.866814 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867540 kubelet[2779]: I1002 19:59:10.866863 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867540 kubelet[2779]: I1002 19:59:10.867243 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cni-path" (OuterVolumeSpecName: "cni-path") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867540 kubelet[2779]: I1002 19:59:10.867276 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867774 kubelet[2779]: I1002 19:59:10.867509 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-hostproc" (OuterVolumeSpecName: "hostproc") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867774 kubelet[2779]: I1002 19:59:10.867536 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867774 kubelet[2779]: I1002 19:59:10.867725 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867774 kubelet[2779]: I1002 19:59:10.867762 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867978 kubelet[2779]: I1002 19:59:10.867785 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867978 kubelet[2779]: I1002 19:59:10.867808 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:10.867978 kubelet[2779]: W1002 19:59:10.867937 2779 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/5d8300eb-8d6b-43c7-b224-ad18e1860402/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:10.869982 kubelet[2779]: I1002 19:59:10.869949 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:10.880079 kubelet[2779]: I1002 19:59:10.880019 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-kube-api-access-tpdc4" (OuterVolumeSpecName: "kube-api-access-tpdc4") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "kube-api-access-tpdc4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:10.880271 kubelet[2779]: I1002 19:59:10.880179 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/5d8300eb-8d6b-43c7-b224-ad18e1860402-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:59:10.881714 kubelet[2779]: I1002 19:59:10.881675 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "5d8300eb-8d6b-43c7-b224-ad18e1860402" (UID: "5d8300eb-8d6b-43c7-b224-ad18e1860402"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:10.967262 kubelet[2779]: I1002 19:59:10.967211 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f321075-2ece-4798-a08d-a47dbb261e85-cilium-config-path\") pod \"4f321075-2ece-4798-a08d-a47dbb261e85\" (UID: \"4f321075-2ece-4798-a08d-a47dbb261e85\") " Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967275 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xxxx4\" (UniqueName: \"kubernetes.io/projected/4f321075-2ece-4798-a08d-a47dbb261e85-kube-api-access-xxxx4\") pod \"4f321075-2ece-4798-a08d-a47dbb261e85\" (UID: \"4f321075-2ece-4798-a08d-a47dbb261e85\") " Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967320 2779 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-kernel\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967337 2779 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-etc-cni-netd\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967353 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-config-path\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967366 2779 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-host-proc-sys-net\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967379 2779 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-bpf-maps\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967393 2779 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-tpdc4\" (UniqueName: \"kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-kube-api-access-tpdc4\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967468 kubelet[2779]: I1002 19:59:10.967410 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-cgroup\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967814 kubelet[2779]: I1002 19:59:10.967424 2779 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/5d8300eb-8d6b-43c7-b224-ad18e1860402-clustermesh-secrets\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967814 kubelet[2779]: I1002 19:59:10.967437 2779 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cni-path\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967814 kubelet[2779]: I1002 19:59:10.967449 2779 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-hostproc\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967814 kubelet[2779]: I1002 19:59:10.967461 2779 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-lib-modules\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967814 kubelet[2779]: I1002 19:59:10.967476 2779 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/5d8300eb-8d6b-43c7-b224-ad18e1860402-hubble-tls\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967814 kubelet[2779]: I1002 19:59:10.967490 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-cilium-run\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.967814 kubelet[2779]: I1002 19:59:10.967506 2779 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5d8300eb-8d6b-43c7-b224-ad18e1860402-xtables-lock\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:10.968358 kubelet[2779]: W1002 19:59:10.968317 2779 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/4f321075-2ece-4798-a08d-a47dbb261e85/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:10.971327 kubelet[2779]: I1002 19:59:10.971277 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4f321075-2ece-4798-a08d-a47dbb261e85-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4f321075-2ece-4798-a08d-a47dbb261e85" (UID: "4f321075-2ece-4798-a08d-a47dbb261e85"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:10.971539 kubelet[2779]: I1002 19:59:10.971446 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4f321075-2ece-4798-a08d-a47dbb261e85-kube-api-access-xxxx4" (OuterVolumeSpecName: "kube-api-access-xxxx4") pod "4f321075-2ece-4798-a08d-a47dbb261e85" (UID: "4f321075-2ece-4798-a08d-a47dbb261e85"). InnerVolumeSpecName "kube-api-access-xxxx4". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:11.067742 kubelet[2779]: I1002 19:59:11.067691 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4f321075-2ece-4798-a08d-a47dbb261e85-cilium-config-path\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:11.067742 kubelet[2779]: I1002 19:59:11.067733 2779 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-xxxx4\" (UniqueName: \"kubernetes.io/projected/4f321075-2ece-4798-a08d-a47dbb261e85-kube-api-access-xxxx4\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 19:59:11.456171 kubelet[2779]: I1002 19:59:11.456144 2779 scope.go:115] "RemoveContainer" containerID="0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b" Oct 2 19:59:11.469153 systemd[1]: Removed slice kubepods-burstable-pod5d8300eb_8d6b_43c7_b224_ad18e1860402.slice. Oct 2 19:59:11.469782 env[1631]: time="2023-10-02T19:59:11.469607753Z" level=info msg="RemoveContainer for \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\"" Oct 2 19:59:11.480680 env[1631]: time="2023-10-02T19:59:11.480513609Z" level=info msg="RemoveContainer for \"0079c50aec43c8959bd3f5afca893c68147ee9ff3f1a628821fb13f87a7a7e2b\" returns successfully" Oct 2 19:59:11.480900 kubelet[2779]: I1002 19:59:11.480796 2779 scope.go:115] "RemoveContainer" containerID="8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090" Oct 2 19:59:11.496029 systemd[1]: Removed slice kubepods-besteffort-pod4f321075_2ece_4798_a08d_a47dbb261e85.slice. Oct 2 19:59:11.508745 env[1631]: time="2023-10-02T19:59:11.508255016Z" level=info msg="RemoveContainer for \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\"" Oct 2 19:59:11.519580 env[1631]: time="2023-10-02T19:59:11.519529473Z" level=info msg="RemoveContainer for \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\" returns successfully" Oct 2 19:59:11.519925 kubelet[2779]: I1002 19:59:11.519898 2779 scope.go:115] "RemoveContainer" containerID="8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090" Oct 2 19:59:11.520564 env[1631]: time="2023-10-02T19:59:11.520368233Z" level=error msg="ContainerStatus for \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\": not found" Oct 2 19:59:11.520728 kubelet[2779]: E1002 19:59:11.520706 2779 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\": not found" containerID="8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090" Oct 2 19:59:11.520799 kubelet[2779]: I1002 19:59:11.520748 2779 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090} err="failed to get container status \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\": rpc error: code = NotFound desc = an error occurred when try to find container \"8ff29d76552d26e2d6b7427e57f043beef26717c7c7bd3b4f6f2906b9272b090\": not found" Oct 2 19:59:11.532403 systemd[1]: var-lib-kubelet-pods-4f321075\x2d2ece\x2d4798\x2da08d\x2da47dbb261e85-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxxxx4.mount: Deactivated successfully. Oct 2 19:59:11.532908 systemd[1]: var-lib-kubelet-pods-5d8300eb\x2d8d6b\x2d43c7\x2db224\x2dad18e1860402-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dtpdc4.mount: Deactivated successfully. Oct 2 19:59:11.533094 systemd[1]: var-lib-kubelet-pods-5d8300eb\x2d8d6b\x2d43c7\x2db224\x2dad18e1860402-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:59:11.533180 systemd[1]: var-lib-kubelet-pods-5d8300eb\x2d8d6b\x2d43c7\x2db224\x2dad18e1860402-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:59:12.451857 sshd[3704]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:12.452000 audit[3704]: USER_END pid=3704 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:12.452000 audit[3704]: CRED_DISP pid=3704 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:12.455891 systemd[1]: sshd@28-172.31.29.37:22-139.178.89.65:50780.service: Deactivated successfully. Oct 2 19:59:12.457071 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:59:12.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.29.37:22-139.178.89.65:50780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:12.458695 systemd-logind[1624]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:59:12.459880 systemd-logind[1624]: Removed session 29. Oct 2 19:59:12.499845 systemd[1]: Started sshd@29-172.31.29.37:22-139.178.89.65:50796.service. Oct 2 19:59:12.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.37:22-139.178.89.65:50796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:12.614134 kubelet[2779]: I1002 19:59:12.614035 2779 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=4f321075-2ece-4798-a08d-a47dbb261e85 path="/var/lib/kubelet/pods/4f321075-2ece-4798-a08d-a47dbb261e85/volumes" Oct 2 19:59:12.618254 kubelet[2779]: I1002 19:59:12.618153 2779 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=5d8300eb-8d6b-43c7-b224-ad18e1860402 path="/var/lib/kubelet/pods/5d8300eb-8d6b-43c7-b224-ad18e1860402/volumes" Oct 2 19:59:12.704000 audit[3812]: USER_ACCT pid=3812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:12.705809 sshd[3812]: Accepted publickey for core from 139.178.89.65 port 50796 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:59:12.706000 audit[3812]: CRED_ACQ pid=3812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:12.706000 audit[3812]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5d55ce00 a2=3 a3=0 items=0 ppid=1 pid=3812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:12.706000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:59:12.708279 sshd[3812]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:59:12.710970 kubelet[2779]: E1002 19:59:12.710664 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:12.721148 systemd-logind[1624]: New session 30 of user core. Oct 2 19:59:12.721185 systemd[1]: Started session-30.scope. Oct 2 19:59:12.730000 audit[3812]: USER_START pid=3812 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:12.732000 audit[3814]: CRED_ACQ pid=3814 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:13.738001 kubelet[2779]: I1002 19:59:13.737965 2779 topology_manager.go:210] "Topology Admit Handler" Oct 2 19:59:13.738535 kubelet[2779]: E1002 19:59:13.738069 2779 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: E1002 19:59:13.738082 2779 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: E1002 19:59:13.738092 2779 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: E1002 19:59:13.738103 2779 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: E1002 19:59:13.738112 2779 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: E1002 19:59:13.738122 2779 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="4f321075-2ece-4798-a08d-a47dbb261e85" containerName="cilium-operator" Oct 2 19:59:13.738535 kubelet[2779]: I1002 19:59:13.738169 2779 memory_manager.go:346] "RemoveStaleState removing state" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: I1002 19:59:13.738179 2779 memory_manager.go:346] "RemoveStaleState removing state" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: I1002 19:59:13.738189 2779 memory_manager.go:346] "RemoveStaleState removing state" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: I1002 19:59:13.738200 2779 memory_manager.go:346] "RemoveStaleState removing state" podUID="4f321075-2ece-4798-a08d-a47dbb261e85" containerName="cilium-operator" Oct 2 19:59:13.738535 kubelet[2779]: E1002 19:59:13.738240 2779 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.738535 kubelet[2779]: I1002 19:59:13.738263 2779 memory_manager.go:346] "RemoveStaleState removing state" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.739624 kubelet[2779]: I1002 19:59:13.738272 2779 memory_manager.go:346] "RemoveStaleState removing state" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.739624 kubelet[2779]: I1002 19:59:13.738280 2779 memory_manager.go:346] "RemoveStaleState removing state" podUID="5d8300eb-8d6b-43c7-b224-ad18e1860402" containerName="mount-cgroup" Oct 2 19:59:13.749452 systemd[1]: Created slice kubepods-burstable-podd5ff6b2e_a74b_4ed0_a70a_9bcfd936595c.slice. Oct 2 19:59:13.760677 kubelet[2779]: W1002 19:59:13.760637 2779 reflector.go:424] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-29-37" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-37' and this object Oct 2 19:59:13.760873 kubelet[2779]: E1002 19:59:13.760698 2779 reflector.go:140] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-29-37" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-29-37' and this object Oct 2 19:59:13.903792 kubelet[2779]: I1002 19:59:13.903747 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-net\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.904253 kubelet[2779]: I1002 19:59:13.904191 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qvblt\" (UniqueName: \"kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-kube-api-access-qvblt\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.904320 kubelet[2779]: I1002 19:59:13.904273 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-etc-cni-netd\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.904374 kubelet[2779]: I1002 19:59:13.904333 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-kernel\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.904427 kubelet[2779]: I1002 19:59:13.904398 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hubble-tls\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.904489 kubelet[2779]: I1002 19:59:13.904477 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cni-path\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.904964 kubelet[2779]: I1002 19:59:13.904742 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-ipsec-secrets\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.906088 kubelet[2779]: I1002 19:59:13.906069 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-lib-modules\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.907084 kubelet[2779]: I1002 19:59:13.906722 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-cgroup\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.907175 kubelet[2779]: I1002 19:59:13.907125 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-xtables-lock\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.907175 kubelet[2779]: I1002 19:59:13.907164 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-config-path\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.907294 kubelet[2779]: I1002 19:59:13.907200 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hostproc\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.907294 kubelet[2779]: I1002 19:59:13.907232 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-run\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.907294 kubelet[2779]: I1002 19:59:13.907261 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-clustermesh-secrets\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:13.907435 kubelet[2779]: I1002 19:59:13.907291 2779 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-bpf-maps\") pod \"cilium-nh5b7\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " pod="kube-system/cilium-nh5b7" Oct 2 19:59:14.654419 env[1631]: time="2023-10-02T19:59:14.654370388Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-nh5b7,Uid:d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c,Namespace:kube-system,Attempt:0,}" Oct 2 19:59:14.680192 env[1631]: time="2023-10-02T19:59:14.680078045Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:59:14.680390 env[1631]: time="2023-10-02T19:59:14.680158815Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:59:14.680390 env[1631]: time="2023-10-02T19:59:14.680173719Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:59:14.680619 env[1631]: time="2023-10-02T19:59:14.680561582Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0 pid=3833 runtime=io.containerd.runc.v2 Oct 2 19:59:14.698572 systemd[1]: Started cri-containerd-4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0.scope. Oct 2 19:59:14.729314 kernel: kauditd_printk_skb: 26 callbacks suppressed Oct 2 19:59:14.729474 kernel: audit: type=1400 audit(1696276754.717:1343): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.729513 kernel: audit: type=1400 audit(1696276754.717:1344): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.739224 kernel: audit: type=1400 audit(1696276754.717:1345): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.739370 kernel: audit: type=1400 audit(1696276754.717:1346): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.744640 kernel: audit: type=1400 audit(1696276754.717:1347): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.754084 kernel: audit: type=1400 audit(1696276754.717:1348): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.765024 kernel: audit: type=1400 audit(1696276754.717:1349): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.765306 kernel: audit: type=1400 audit(1696276754.717:1350): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.717000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.771121 kernel: audit: type=1400 audit(1696276754.717:1351): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.772647 env[1631]: time="2023-10-02T19:59:14.772607436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-nh5b7,Uid:d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c,Namespace:kube-system,Attempt:0,} returns sandbox id \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\"" Oct 2 19:59:14.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.778105 kernel: audit: type=1400 audit(1696276754.719:1352): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit: BPF prog-id=131 op=LOAD Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=3833 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:14.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326363663836373134376630636234323538356636323261366366 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=3833 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:14.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326363663836373134376630636234323538356636323261366366 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.719000 audit: BPF prog-id=132 op=LOAD Oct 2 19:59:14.719000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c000024380 items=0 ppid=3833 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:14.719000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326363663836373134376630636234323538356636323261366366 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit: BPF prog-id=133 op=LOAD Oct 2 19:59:14.723000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c0000243c8 items=0 ppid=3833 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:14.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326363663836373134376630636234323538356636323261366366 Oct 2 19:59:14.723000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:59:14.723000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { perfmon } for pid=3843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit[3843]: AVC avc: denied { bpf } for pid=3843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:59:14.723000 audit: BPF prog-id=134 op=LOAD Oct 2 19:59:14.723000 audit[3843]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0000247d8 items=0 ppid=3833 pid=3843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:59:14.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464326363663836373134376630636234323538356636323261366366 Oct 2 19:59:14.784727 env[1631]: time="2023-10-02T19:59:14.784684386Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:59:14.805656 env[1631]: time="2023-10-02T19:59:14.805595898Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\"" Oct 2 19:59:14.808729 env[1631]: time="2023-10-02T19:59:14.806382983Z" level=info msg="StartContainer for \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\"" Oct 2 19:59:14.828478 systemd[1]: Started cri-containerd-9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d.scope. Oct 2 19:59:14.842583 systemd[1]: cri-containerd-9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d.scope: Deactivated successfully. Oct 2 19:59:14.886941 env[1631]: time="2023-10-02T19:59:14.886877043Z" level=info msg="shim disconnected" id=9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d Oct 2 19:59:14.886941 env[1631]: time="2023-10-02T19:59:14.886939503Z" level=warning msg="cleaning up after shim disconnected" id=9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d namespace=k8s.io Oct 2 19:59:14.887336 env[1631]: time="2023-10-02T19:59:14.886951486Z" level=info msg="cleaning up dead shim" Oct 2 19:59:14.896400 env[1631]: time="2023-10-02T19:59:14.896232783Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3900 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:14Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:14.896699 env[1631]: time="2023-10-02T19:59:14.896640525Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:59:14.897147 env[1631]: time="2023-10-02T19:59:14.897104283Z" level=error msg="Failed to pipe stderr of container \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\"" error="reading from a closed fifo" Oct 2 19:59:14.897237 env[1631]: time="2023-10-02T19:59:14.897186891Z" level=error msg="Failed to pipe stdout of container \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\"" error="reading from a closed fifo" Oct 2 19:59:14.899900 env[1631]: time="2023-10-02T19:59:14.899851609Z" level=error msg="StartContainer for \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:14.900314 kubelet[2779]: E1002 19:59:14.900286 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d" Oct 2 19:59:14.901130 kubelet[2779]: E1002 19:59:14.900416 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:14.901130 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:14.901130 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:59:14.901130 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qvblt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:14.901483 kubelet[2779]: E1002 19:59:14.900472 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:15.506942 env[1631]: time="2023-10-02T19:59:15.506898154Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:59:15.534674 env[1631]: time="2023-10-02T19:59:15.534620456Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\"" Oct 2 19:59:15.535768 env[1631]: time="2023-10-02T19:59:15.535735135Z" level=info msg="StartContainer for \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\"" Oct 2 19:59:15.568890 systemd[1]: Started cri-containerd-9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091.scope. Oct 2 19:59:15.583274 systemd[1]: cri-containerd-9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091.scope: Deactivated successfully. Oct 2 19:59:15.602423 env[1631]: time="2023-10-02T19:59:15.602363263Z" level=info msg="shim disconnected" id=9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091 Oct 2 19:59:15.602694 env[1631]: time="2023-10-02T19:59:15.602428776Z" level=warning msg="cleaning up after shim disconnected" id=9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091 namespace=k8s.io Oct 2 19:59:15.602694 env[1631]: time="2023-10-02T19:59:15.602441493Z" level=info msg="cleaning up dead shim" Oct 2 19:59:15.611907 env[1631]: time="2023-10-02T19:59:15.611837815Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3936 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:15.612271 env[1631]: time="2023-10-02T19:59:15.612206492Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:59:15.613168 env[1631]: time="2023-10-02T19:59:15.613116760Z" level=error msg="Failed to pipe stdout of container \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\"" error="reading from a closed fifo" Oct 2 19:59:15.613332 env[1631]: time="2023-10-02T19:59:15.613292424Z" level=error msg="Failed to pipe stderr of container \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\"" error="reading from a closed fifo" Oct 2 19:59:15.615877 env[1631]: time="2023-10-02T19:59:15.615827522Z" level=error msg="StartContainer for \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:15.616178 kubelet[2779]: E1002 19:59:15.616154 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091" Oct 2 19:59:15.616370 kubelet[2779]: E1002 19:59:15.616285 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:15.616370 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:15.616370 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:59:15.616370 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qvblt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:15.618666 kubelet[2779]: E1002 19:59:15.616331 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:16.029742 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091-rootfs.mount: Deactivated successfully. Oct 2 19:59:16.524794 kubelet[2779]: I1002 19:59:16.523223 2779 scope.go:115] "RemoveContainer" containerID="9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d" Oct 2 19:59:16.529373 kubelet[2779]: I1002 19:59:16.529346 2779 scope.go:115] "RemoveContainer" containerID="9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d" Oct 2 19:59:16.536550 env[1631]: time="2023-10-02T19:59:16.536192309Z" level=info msg="RemoveContainer for \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\"" Oct 2 19:59:16.538453 env[1631]: time="2023-10-02T19:59:16.538413047Z" level=info msg="RemoveContainer for \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\"" Oct 2 19:59:16.538684 env[1631]: time="2023-10-02T19:59:16.538646286Z" level=error msg="RemoveContainer for \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\" failed" error="failed to set removing state for container \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\": container is already in removing state" Oct 2 19:59:16.539057 kubelet[2779]: E1002 19:59:16.538962 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\": container is already in removing state" containerID="9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d" Oct 2 19:59:16.539057 kubelet[2779]: I1002 19:59:16.539015 2779 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d} err="rpc error: code = Unknown desc = failed to set removing state for container \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\": container is already in removing state" Oct 2 19:59:16.546601 env[1631]: time="2023-10-02T19:59:16.544869526Z" level=info msg="RemoveContainer for \"9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d\" returns successfully" Oct 2 19:59:16.547386 kubelet[2779]: E1002 19:59:16.547264 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:17.531878 kubelet[2779]: E1002 19:59:17.528267 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:17.712037 kubelet[2779]: E1002 19:59:17.712008 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:17.993702 kubelet[2779]: W1002 19:59:17.993594 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd5ff6b2e_a74b_4ed0_a70a_9bcfd936595c.slice/cri-containerd-9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d.scope WatchSource:0}: container "9ebee6ccae4455d87e42b1fb1c9381d13f7d497adf509f4daab17127bd83189d" in namespace "k8s.io": not found Oct 2 19:59:21.101624 kubelet[2779]: W1002 19:59:21.101579 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd5ff6b2e_a74b_4ed0_a70a_9bcfd936595c.slice/cri-containerd-9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091.scope WatchSource:0}: task 9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091 not found: not found Oct 2 19:59:22.714502 kubelet[2779]: E1002 19:59:22.714471 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:27.716470 kubelet[2779]: E1002 19:59:27.716442 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:30.625004 env[1631]: time="2023-10-02T19:59:30.624843712Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:59:30.659081 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2407849726.mount: Deactivated successfully. Oct 2 19:59:30.683510 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount624075416.mount: Deactivated successfully. Oct 2 19:59:30.690785 env[1631]: time="2023-10-02T19:59:30.690719395Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\"" Oct 2 19:59:30.691447 env[1631]: time="2023-10-02T19:59:30.691414155Z" level=info msg="StartContainer for \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\"" Oct 2 19:59:30.727447 systemd[1]: Started cri-containerd-a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161.scope. Oct 2 19:59:30.746580 systemd[1]: cri-containerd-a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161.scope: Deactivated successfully. Oct 2 19:59:30.769494 env[1631]: time="2023-10-02T19:59:30.769435290Z" level=info msg="shim disconnected" id=a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161 Oct 2 19:59:30.769494 env[1631]: time="2023-10-02T19:59:30.769492508Z" level=warning msg="cleaning up after shim disconnected" id=a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161 namespace=k8s.io Oct 2 19:59:30.773102 env[1631]: time="2023-10-02T19:59:30.769503929Z" level=info msg="cleaning up dead shim" Oct 2 19:59:30.786128 env[1631]: time="2023-10-02T19:59:30.785968681Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:30Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3974 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:30Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:30.786371 env[1631]: time="2023-10-02T19:59:30.786308146Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:59:30.788351 env[1631]: time="2023-10-02T19:59:30.788144690Z" level=error msg="Failed to pipe stdout of container \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\"" error="reading from a closed fifo" Oct 2 19:59:30.789392 env[1631]: time="2023-10-02T19:59:30.789351474Z" level=error msg="Failed to pipe stderr of container \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\"" error="reading from a closed fifo" Oct 2 19:59:30.792810 env[1631]: time="2023-10-02T19:59:30.792543685Z" level=error msg="StartContainer for \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:30.795770 kubelet[2779]: E1002 19:59:30.793178 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161" Oct 2 19:59:30.795770 kubelet[2779]: E1002 19:59:30.793386 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:30.795770 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:30.795770 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:59:30.796446 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qvblt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:30.796588 kubelet[2779]: E1002 19:59:30.793534 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:31.576564 kubelet[2779]: I1002 19:59:31.575612 2779 scope.go:115] "RemoveContainer" containerID="9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091" Oct 2 19:59:31.576564 kubelet[2779]: I1002 19:59:31.576536 2779 scope.go:115] "RemoveContainer" containerID="9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091" Oct 2 19:59:31.579849 env[1631]: time="2023-10-02T19:59:31.579810212Z" level=info msg="RemoveContainer for \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\"" Oct 2 19:59:31.580587 env[1631]: time="2023-10-02T19:59:31.580134563Z" level=info msg="RemoveContainer for \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\"" Oct 2 19:59:31.580900 env[1631]: time="2023-10-02T19:59:31.580798671Z" level=error msg="RemoveContainer for \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\" failed" error="failed to set removing state for container \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\": container is already in removing state" Oct 2 19:59:31.581291 kubelet[2779]: E1002 19:59:31.581228 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\": container is already in removing state" containerID="9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091" Oct 2 19:59:31.582085 kubelet[2779]: E1002 19:59:31.582012 2779 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091": container is already in removing state; Skipping pod "cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)" Oct 2 19:59:31.584282 kubelet[2779]: E1002 19:59:31.584263 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:31.588792 env[1631]: time="2023-10-02T19:59:31.588709380Z" level=info msg="RemoveContainer for \"9a82453bc3e53843405ebfcab9a47940566199b12236e9ac8b3a9ee6cb7b7091\" returns successfully" Oct 2 19:59:31.649099 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161-rootfs.mount: Deactivated successfully. Oct 2 19:59:32.717895 kubelet[2779]: E1002 19:59:32.717873 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:33.874222 kubelet[2779]: W1002 19:59:33.874176 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd5ff6b2e_a74b_4ed0_a70a_9bcfd936595c.slice/cri-containerd-a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161.scope WatchSource:0}: task a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161 not found: not found Oct 2 19:59:37.720489 kubelet[2779]: E1002 19:59:37.720449 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:42.721333 kubelet[2779]: E1002 19:59:42.721288 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:44.606598 kubelet[2779]: E1002 19:59:44.606558 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:45.310000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:45.312686 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 19:59:45.312814 kernel: audit: type=1400 audit(1696276785.310:1361): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:45.310000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:45.330305 kernel: audit: type=1400 audit(1696276785.310:1362): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:45.330501 kernel: audit: type=1300 audit(1696276785.310:1362): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e76030 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:45.310000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000e76030 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:45.310000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:45.310000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001651b00 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:45.383820 kernel: audit: type=1327 audit(1696276785.310:1362): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:45.383999 kernel: audit: type=1300 audit(1696276785.310:1361): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001651b00 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 19:59:45.384056 kernel: audit: type=1327 audit(1696276785.310:1361): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:45.310000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:47.722492 kubelet[2779]: E1002 19:59:47.722458 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:47.989000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:47.989000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00291bbe0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:59:48.020819 kernel: audit: type=1400 audit(1696276787.989:1363): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:48.020974 kernel: audit: type=1300 audit(1696276787.989:1363): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00291bbe0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:59:48.021009 kernel: audit: type=1327 audit(1696276787.989:1363): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:59:47.989000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:59:48.002000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:48.060529 kernel: audit: type=1400 audit(1696276788.002:1364): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:48.002000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0056e9aa0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:59:48.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:59:48.002000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:48.002000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00292dec0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:59:48.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:59:48.003000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:48.003000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0057c99e0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:59:48.003000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:59:48.003000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:48.003000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0057c9aa0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:59:48.003000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:59:48.003000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:48.003000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0057c9b00 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 19:59:48.003000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 19:59:52.410802 env[1631]: time="2023-10-02T19:59:52.410627885Z" level=info msg="StopPodSandbox for \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\"" Oct 2 19:59:52.411348 env[1631]: time="2023-10-02T19:59:52.410942752Z" level=info msg="TearDown network for sandbox \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" successfully" Oct 2 19:59:52.411348 env[1631]: time="2023-10-02T19:59:52.410997640Z" level=info msg="StopPodSandbox for \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" returns successfully" Oct 2 19:59:52.412955 env[1631]: time="2023-10-02T19:59:52.412916496Z" level=info msg="RemovePodSandbox for \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\"" Oct 2 19:59:52.413241 env[1631]: time="2023-10-02T19:59:52.412958950Z" level=info msg="Forcibly stopping sandbox \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\"" Oct 2 19:59:52.413241 env[1631]: time="2023-10-02T19:59:52.413100383Z" level=info msg="TearDown network for sandbox \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" successfully" Oct 2 19:59:52.420640 env[1631]: time="2023-10-02T19:59:52.420585775Z" level=info msg="RemovePodSandbox \"2b3c1e472414b8a3e400395221d84f82075ab42de9113ba7bc57cbdec2ab2938\" returns successfully" Oct 2 19:59:52.422028 env[1631]: time="2023-10-02T19:59:52.421980772Z" level=info msg="StopPodSandbox for \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\"" Oct 2 19:59:52.422564 env[1631]: time="2023-10-02T19:59:52.422131099Z" level=info msg="TearDown network for sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" successfully" Oct 2 19:59:52.422564 env[1631]: time="2023-10-02T19:59:52.422187649Z" level=info msg="StopPodSandbox for \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" returns successfully" Oct 2 19:59:52.422865 env[1631]: time="2023-10-02T19:59:52.422839119Z" level=info msg="RemovePodSandbox for \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\"" Oct 2 19:59:52.422949 env[1631]: time="2023-10-02T19:59:52.422873630Z" level=info msg="Forcibly stopping sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\"" Oct 2 19:59:52.422998 env[1631]: time="2023-10-02T19:59:52.422963389Z" level=info msg="TearDown network for sandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" successfully" Oct 2 19:59:52.429270 env[1631]: time="2023-10-02T19:59:52.429002185Z" level=info msg="RemovePodSandbox \"62d59a6ad816ca039f51cd1b343746410d7e2373269e56d399bc37cd93521816\" returns successfully" Oct 2 19:59:52.725014 kubelet[2779]: E1002 19:59:52.724897 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:55.614081 env[1631]: time="2023-10-02T19:59:55.611959483Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:59:55.631574 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4064929480.mount: Deactivated successfully. Oct 2 19:59:55.645982 env[1631]: time="2023-10-02T19:59:55.645931251Z" level=info msg="CreateContainer within sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\"" Oct 2 19:59:55.647153 env[1631]: time="2023-10-02T19:59:55.647117995Z" level=info msg="StartContainer for \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\"" Oct 2 19:59:55.703917 systemd[1]: Started cri-containerd-801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e.scope. Oct 2 19:59:55.717743 systemd[1]: cri-containerd-801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e.scope: Deactivated successfully. Oct 2 19:59:55.747472 env[1631]: time="2023-10-02T19:59:55.747405629Z" level=info msg="shim disconnected" id=801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e Oct 2 19:59:55.747472 env[1631]: time="2023-10-02T19:59:55.747470829Z" level=warning msg="cleaning up after shim disconnected" id=801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e namespace=k8s.io Oct 2 19:59:55.747778 env[1631]: time="2023-10-02T19:59:55.747482445Z" level=info msg="cleaning up dead shim" Oct 2 19:59:55.762358 env[1631]: time="2023-10-02T19:59:55.762096536Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4015 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:55.762752 env[1631]: time="2023-10-02T19:59:55.762678987Z" level=error msg="copy shim log" error="read /proc/self/fd/34: file already closed" Oct 2 19:59:55.764584 env[1631]: time="2023-10-02T19:59:55.764520271Z" level=error msg="Failed to pipe stderr of container \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\"" error="reading from a closed fifo" Oct 2 19:59:55.765155 env[1631]: time="2023-10-02T19:59:55.765103351Z" level=error msg="Failed to pipe stdout of container \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\"" error="reading from a closed fifo" Oct 2 19:59:55.768847 env[1631]: time="2023-10-02T19:59:55.768783684Z" level=error msg="StartContainer for \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:55.772414 kubelet[2779]: E1002 19:59:55.772387 2779 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e" Oct 2 19:59:55.772856 kubelet[2779]: E1002 19:59:55.772512 2779 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:55.772856 kubelet[2779]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:55.772856 kubelet[2779]: rm /hostbin/cilium-mount Oct 2 19:59:55.772856 kubelet[2779]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qvblt,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:55.773101 kubelet[2779]: E1002 19:59:55.772568 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:56.626335 systemd[1]: run-containerd-runc-k8s.io-801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e-runc.s3h5ms.mount: Deactivated successfully. Oct 2 19:59:56.626466 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e-rootfs.mount: Deactivated successfully. Oct 2 19:59:56.643517 kubelet[2779]: I1002 19:59:56.643484 2779 scope.go:115] "RemoveContainer" containerID="a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161" Oct 2 19:59:56.644038 kubelet[2779]: I1002 19:59:56.644005 2779 scope.go:115] "RemoveContainer" containerID="a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161" Oct 2 19:59:56.646652 env[1631]: time="2023-10-02T19:59:56.646596673Z" level=info msg="RemoveContainer for \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\"" Oct 2 19:59:56.648124 env[1631]: time="2023-10-02T19:59:56.648087140Z" level=info msg="RemoveContainer for \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\"" Oct 2 19:59:56.648419 env[1631]: time="2023-10-02T19:59:56.648379810Z" level=error msg="RemoveContainer for \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\" failed" error="failed to set removing state for container \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\": container is already in removing state" Oct 2 19:59:56.648968 kubelet[2779]: E1002 19:59:56.648936 2779 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\": container is already in removing state" containerID="a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161" Oct 2 19:59:56.649114 kubelet[2779]: E1002 19:59:56.648977 2779 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161": container is already in removing state; Skipping pod "cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)" Oct 2 19:59:56.649391 kubelet[2779]: E1002 19:59:56.649374 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 19:59:56.654564 env[1631]: time="2023-10-02T19:59:56.654511753Z" level=info msg="RemoveContainer for \"a1dbac0c82bdecbce017cd5490afaf2b999168789f2fadb2896fb89e9f491161\" returns successfully" Oct 2 19:59:57.726069 kubelet[2779]: E1002 19:59:57.726031 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:58.856481 kubelet[2779]: W1002 19:59:58.856435 2779 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd5ff6b2e_a74b_4ed0_a70a_9bcfd936595c.slice/cri-containerd-801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e.scope WatchSource:0}: task 801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e not found: not found Oct 2 20:00:02.727195 kubelet[2779]: E1002 20:00:02.727154 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:02.892000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.895203 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:00:02.895301 kernel: audit: type=1400 audit(1696276802.892:1369): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.892000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e75500 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:02.947217 kernel: audit: type=1300 audit(1696276802.892:1369): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e75500 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:02.947378 kernel: audit: type=1327 audit(1696276802.892:1369): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:02.892000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:02.973325 kernel: audit: type=1400 audit(1696276802.905:1370): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.905000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.905000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001045260 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:03.004635 kernel: audit: type=1300 audit(1696276802.905:1370): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001045260 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:03.004894 kernel: audit: type=1327 audit(1696276802.905:1370): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:02.905000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:03.020374 kernel: audit: type=1400 audit(1696276802.913:1371): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.913000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.913000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001045280 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:03.055356 kernel: audit: type=1300 audit(1696276802.913:1371): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001045280 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:03.055518 kernel: audit: type=1327 audit(1696276802.913:1371): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:02.913000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:03.076561 kernel: audit: type=1400 audit(1696276802.928:1372): avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.928000 audit[2649]: AVC avc: denied { watch } for pid=2649 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:02.928000 audit[2649]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0010452a0 a2=fc6 a3=0 items=0 ppid=2429 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:02.928000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:07.728599 kubelet[2779]: E1002 20:00:07.728568 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:08.606452 kubelet[2779]: E1002 20:00:08.606413 2779 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-nh5b7_kube-system(d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c)\"" pod="kube-system/cilium-nh5b7" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c Oct 2 20:00:12.730222 kubelet[2779]: E1002 20:00:12.730175 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:15.772032 env[1631]: time="2023-10-02T20:00:15.770551321Z" level=info msg="StopPodSandbox for \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\"" Oct 2 20:00:15.774768 env[1631]: time="2023-10-02T20:00:15.774712536Z" level=info msg="Container to stop \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:00:15.786577 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0-shm.mount: Deactivated successfully. Oct 2 20:00:15.828441 systemd[1]: cri-containerd-4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0.scope: Deactivated successfully. Oct 2 20:00:15.827000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:00:15.834451 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:00:15.834780 kernel: audit: type=1334 audit(1696276815.827:1373): prog-id=131 op=UNLOAD Oct 2 20:00:15.840000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:00:15.844480 kernel: audit: type=1334 audit(1696276815.840:1374): prog-id=134 op=UNLOAD Oct 2 20:00:15.905454 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0-rootfs.mount: Deactivated successfully. Oct 2 20:00:15.953809 env[1631]: time="2023-10-02T20:00:15.953754530Z" level=info msg="shim disconnected" id=4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0 Oct 2 20:00:15.954143 env[1631]: time="2023-10-02T20:00:15.954115675Z" level=warning msg="cleaning up after shim disconnected" id=4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0 namespace=k8s.io Oct 2 20:00:15.954230 env[1631]: time="2023-10-02T20:00:15.954143196Z" level=info msg="cleaning up dead shim" Oct 2 20:00:15.961936 sshd[3812]: pam_unix(sshd:session): session closed for user core Oct 2 20:00:15.965000 audit[3812]: USER_END pid=3812 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:00:15.984711 kernel: audit: type=1106 audit(1696276815.965:1375): pid=3812 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:00:15.984839 kernel: audit: type=1104 audit(1696276815.965:1376): pid=3812 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:00:15.965000 audit[3812]: CRED_DISP pid=3812 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:00:15.982179 systemd[1]: sshd@29-172.31.29.37:22-139.178.89.65:50796.service: Deactivated successfully. Oct 2 20:00:15.983299 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:00:15.984113 systemd[1]: session-30.scope: Consumed 1.073s CPU time. Oct 2 20:00:15.989164 systemd-logind[1624]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:00:15.994288 systemd-logind[1624]: Removed session 30. Oct 2 20:00:15.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.37:22-139.178.89.65:50796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:16.008189 kernel: audit: type=1131 audit(1696276815.981:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.29.37:22-139.178.89.65:50796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:00:16.010619 env[1631]: time="2023-10-02T20:00:16.009957059Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4048 runtime=io.containerd.runc.v2\n" Oct 2 20:00:16.010972 env[1631]: time="2023-10-02T20:00:16.010938056Z" level=info msg="TearDown network for sandbox \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" successfully" Oct 2 20:00:16.011084 env[1631]: time="2023-10-02T20:00:16.010974315Z" level=info msg="StopPodSandbox for \"4d2ccf867147f0cb42585f622a6cfabd78033aeac197afee6553f9a37bbcebc0\" returns successfully" Oct 2 20:00:16.166579 kubelet[2779]: I1002 20:00:16.166530 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hubble-tls\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.166579 kubelet[2779]: I1002 20:00:16.166589 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-ipsec-secrets\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167333 kubelet[2779]: I1002 20:00:16.166617 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-bpf-maps\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167333 kubelet[2779]: I1002 20:00:16.166645 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-kernel\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167333 kubelet[2779]: I1002 20:00:16.166669 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-net\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167333 kubelet[2779]: I1002 20:00:16.166695 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-etc-cni-netd\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167333 kubelet[2779]: I1002 20:00:16.166733 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-config-path\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167333 kubelet[2779]: I1002 20:00:16.166767 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qvblt\" (UniqueName: \"kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-kube-api-access-qvblt\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167707 kubelet[2779]: I1002 20:00:16.166791 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-xtables-lock\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167707 kubelet[2779]: I1002 20:00:16.166900 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cni-path\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167707 kubelet[2779]: I1002 20:00:16.166933 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-lib-modules\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167707 kubelet[2779]: I1002 20:00:16.166959 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-cgroup\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167707 kubelet[2779]: I1002 20:00:16.167084 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hostproc\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.167707 kubelet[2779]: I1002 20:00:16.167116 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-run\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.168433 kubelet[2779]: I1002 20:00:16.167150 2779 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-clustermesh-secrets\") pod \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\" (UID: \"d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c\") " Oct 2 20:00:16.169696 kubelet[2779]: W1002 20:00:16.168846 2779 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:00:16.170737 kubelet[2779]: I1002 20:00:16.170693 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.170900 kubelet[2779]: I1002 20:00:16.170880 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cni-path" (OuterVolumeSpecName: "cni-path") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.171240 kubelet[2779]: I1002 20:00:16.171123 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.171443 kubelet[2779]: I1002 20:00:16.171425 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.171621 kubelet[2779]: I1002 20:00:16.171552 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hostproc" (OuterVolumeSpecName: "hostproc") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.171835 kubelet[2779]: I1002 20:00:16.171769 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.175904 kubelet[2779]: I1002 20:00:16.173885 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.176257 kubelet[2779]: I1002 20:00:16.173914 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.176365 kubelet[2779]: I1002 20:00:16.173935 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.176443 kubelet[2779]: I1002 20:00:16.173955 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:00:16.176512 kubelet[2779]: I1002 20:00:16.175848 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:00:16.185151 systemd[1]: var-lib-kubelet-pods-d5ff6b2e\x2da74b\x2d4ed0\x2da70a\x2d9bcfd936595c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqvblt.mount: Deactivated successfully. Oct 2 20:00:16.194140 systemd[1]: var-lib-kubelet-pods-d5ff6b2e\x2da74b\x2d4ed0\x2da70a\x2d9bcfd936595c-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:16.198898 systemd[1]: var-lib-kubelet-pods-d5ff6b2e\x2da74b\x2d4ed0\x2da70a\x2d9bcfd936595c-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:00:16.200738 kubelet[2779]: I1002 20:00:16.200698 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:16.200987 kubelet[2779]: I1002 20:00:16.200966 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:00:16.201449 kubelet[2779]: I1002 20:00:16.201420 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-kube-api-access-qvblt" (OuterVolumeSpecName: "kube-api-access-qvblt") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "kube-api-access-qvblt". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:16.203065 kubelet[2779]: I1002 20:00:16.203023 2779 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c" (UID: "d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:00:16.267706 kubelet[2779]: I1002 20:00:16.267654 2779 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-etc-cni-netd\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.267706 kubelet[2779]: I1002 20:00:16.267694 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-config-path\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.267706 kubelet[2779]: I1002 20:00:16.267709 2779 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-qvblt\" (UniqueName: \"kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-kube-api-access-qvblt\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267724 2779 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-xtables-lock\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267738 2779 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cni-path\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267750 2779 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-lib-modules\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267762 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-cgroup\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267780 2779 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hostproc\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267792 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-run\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267805 2779 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-clustermesh-secrets\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268129 kubelet[2779]: I1002 20:00:16.267817 2779 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-hubble-tls\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268388 kubelet[2779]: I1002 20:00:16.267831 2779 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-cilium-ipsec-secrets\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268388 kubelet[2779]: I1002 20:00:16.267844 2779 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-bpf-maps\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268388 kubelet[2779]: I1002 20:00:16.267858 2779 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-kernel\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.268388 kubelet[2779]: I1002 20:00:16.267871 2779 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c-host-proc-sys-net\") on node \"ip-172-31-29-37\" DevicePath \"\"" Oct 2 20:00:16.617077 systemd[1]: Removed slice kubepods-burstable-podd5ff6b2e_a74b_4ed0_a70a_9bcfd936595c.slice. Oct 2 20:00:16.738394 kubelet[2779]: I1002 20:00:16.738369 2779 scope.go:115] "RemoveContainer" containerID="801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e" Oct 2 20:00:16.747300 env[1631]: time="2023-10-02T20:00:16.746832503Z" level=info msg="RemoveContainer for \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\"" Oct 2 20:00:16.754912 env[1631]: time="2023-10-02T20:00:16.754863042Z" level=info msg="RemoveContainer for \"801ac9d533068b7a0ec008d452cab31ac9661e82bbb0515bd96f15072f77b73e\" returns successfully" Oct 2 20:00:16.785092 systemd[1]: var-lib-kubelet-pods-d5ff6b2e\x2da74b\x2d4ed0\x2da70a\x2d9bcfd936595c-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:00:17.732417 kubelet[2779]: E1002 20:00:17.732385 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:18.609722 kubelet[2779]: I1002 20:00:18.609684 2779 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c path="/var/lib/kubelet/pods/d5ff6b2e-a74b-4ed0-a70a-9bcfd936595c/volumes" Oct 2 20:00:22.733681 kubelet[2779]: E1002 20:00:22.733614 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:27.736877 kubelet[2779]: E1002 20:00:27.736849 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:31.588595 systemd[1]: cri-containerd-7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9.scope: Deactivated successfully. Oct 2 20:00:31.589251 systemd[1]: cri-containerd-7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9.scope: Consumed 5.299s CPU time. Oct 2 20:00:31.605172 kernel: audit: type=1334 audit(1696276831.596:1378): prog-id=86 op=UNLOAD Oct 2 20:00:31.605645 kernel: audit: type=1334 audit(1696276831.596:1379): prog-id=108 op=UNLOAD Oct 2 20:00:31.596000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:00:31.596000 audit: BPF prog-id=108 op=UNLOAD Oct 2 20:00:31.644761 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9-rootfs.mount: Deactivated successfully. Oct 2 20:00:31.681533 env[1631]: time="2023-10-02T20:00:31.681440242Z" level=info msg="shim disconnected" id=7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9 Oct 2 20:00:31.681533 env[1631]: time="2023-10-02T20:00:31.681530259Z" level=warning msg="cleaning up after shim disconnected" id=7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9 namespace=k8s.io Oct 2 20:00:31.685122 env[1631]: time="2023-10-02T20:00:31.681544294Z" level=info msg="cleaning up dead shim" Oct 2 20:00:31.710409 env[1631]: time="2023-10-02T20:00:31.709510364Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4078 runtime=io.containerd.runc.v2\n" Oct 2 20:00:31.790965 kubelet[2779]: I1002 20:00:31.790915 2779 scope.go:115] "RemoveContainer" containerID="7d2f6f86d76ba36be7ef008126165bffcca2a4840156a8162eff934ad63447d9" Oct 2 20:00:31.819473 env[1631]: time="2023-10-02T20:00:31.819377758Z" level=info msg="CreateContainer within sandbox \"956605072e2106985244f7d2d861c5f65f8656ae65e89c4aecae916bb9aabd0f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:00:31.849226 env[1631]: time="2023-10-02T20:00:31.848892242Z" level=info msg="CreateContainer within sandbox \"956605072e2106985244f7d2d861c5f65f8656ae65e89c4aecae916bb9aabd0f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"1612cc4e52ab7fabd335e549f11358fd4711868a507b1aa68045816154382627\"" Oct 2 20:00:31.850267 env[1631]: time="2023-10-02T20:00:31.850225439Z" level=info msg="StartContainer for \"1612cc4e52ab7fabd335e549f11358fd4711868a507b1aa68045816154382627\"" Oct 2 20:00:31.883431 systemd[1]: Started cri-containerd-1612cc4e52ab7fabd335e549f11358fd4711868a507b1aa68045816154382627.scope. Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.921320 kernel: audit: type=1400 audit(1696276831.912:1380): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.932093 kernel: audit: type=1400 audit(1696276831.912:1381): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.932376 kernel: audit: type=1400 audit(1696276831.912:1382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.940918 kernel: audit: type=1400 audit(1696276831.912:1383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.949213 kernel: audit: type=1400 audit(1696276831.912:1384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.963813 kernel: audit: type=1400 audit(1696276831.912:1385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.963969 kernel: audit: type=1400 audit(1696276831.912:1386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.912000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.919000 audit: BPF prog-id=135 op=LOAD Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2429 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:31.971200 kernel: audit: type=1400 audit(1696276831.912:1387): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313263633465353261623766616264333335653534396631313335 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2429 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:31.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313263633465353261623766616264333335653534396631313335 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.920000 audit: BPF prog-id=136 op=LOAD Oct 2 20:00:31.920000 audit[4100]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003b6880 items=0 ppid=2429 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:31.920000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313263633465353261623766616264333335653534396631313335 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit: BPF prog-id=137 op=LOAD Oct 2 20:00:31.926000 audit[4100]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003b68c8 items=0 ppid=2429 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:31.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313263633465353261623766616264333335653534396631313335 Oct 2 20:00:31.926000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:00:31.926000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { perfmon } for pid=4100 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit[4100]: AVC avc: denied { bpf } for pid=4100 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:31.926000 audit: BPF prog-id=138 op=LOAD Oct 2 20:00:31.926000 audit[4100]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003b6cd8 items=0 ppid=2429 pid=4100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:31.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136313263633465353261623766616264333335653534396631313335 Oct 2 20:00:32.008575 env[1631]: time="2023-10-02T20:00:32.008515537Z" level=info msg="StartContainer for \"1612cc4e52ab7fabd335e549f11358fd4711868a507b1aa68045816154382627\" returns successfully" Oct 2 20:00:32.739659 kubelet[2779]: E1002 20:00:32.739628 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:33.485000 audit[4111]: AVC avc: denied { watch } for pid=4111 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:33.485000 audit[4111]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000333050 a2=fc6 a3=0 items=0 ppid=2429 pid=4111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:33.485000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:33.494000 audit[4111]: AVC avc: denied { watch } for pid=4111 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:33.494000 audit[4111]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f2c040 a2=fc6 a3=0 items=0 ppid=2429 pid=4111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c698,c908 key=(null) Oct 2 20:00:33.494000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:00:35.477318 systemd[1]: cri-containerd-cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99.scope: Deactivated successfully. Oct 2 20:00:35.477785 systemd[1]: cri-containerd-cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99.scope: Consumed 1.989s CPU time. Oct 2 20:00:35.481000 audit: BPF prog-id=90 op=UNLOAD Oct 2 20:00:35.481000 audit: BPF prog-id=93 op=UNLOAD Oct 2 20:00:35.509505 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99-rootfs.mount: Deactivated successfully. Oct 2 20:00:35.550034 env[1631]: time="2023-10-02T20:00:35.549975466Z" level=info msg="shim disconnected" id=cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99 Oct 2 20:00:35.550034 env[1631]: time="2023-10-02T20:00:35.550033080Z" level=warning msg="cleaning up after shim disconnected" id=cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99 namespace=k8s.io Oct 2 20:00:35.551040 env[1631]: time="2023-10-02T20:00:35.550044942Z" level=info msg="cleaning up dead shim" Oct 2 20:00:35.595131 env[1631]: time="2023-10-02T20:00:35.595078136Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:00:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4139 runtime=io.containerd.runc.v2\n" Oct 2 20:00:35.802619 kubelet[2779]: I1002 20:00:35.802588 2779 scope.go:115] "RemoveContainer" containerID="cfab3146e102d45c2a05b986a8d2c093d62c5ccbb31195eeda3c7343419a8c99" Oct 2 20:00:35.806294 env[1631]: time="2023-10-02T20:00:35.806245362Z" level=info msg="CreateContainer within sandbox \"7b6288da2e6e4a30d0f099afaae1ebf7c864972d9a647f6db17eeded3ced64da\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:00:35.833642 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount621260950.mount: Deactivated successfully. Oct 2 20:00:35.843030 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount795980755.mount: Deactivated successfully. Oct 2 20:00:35.850624 env[1631]: time="2023-10-02T20:00:35.850533519Z" level=info msg="CreateContainer within sandbox \"7b6288da2e6e4a30d0f099afaae1ebf7c864972d9a647f6db17eeded3ced64da\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"dcab45df9ae2a4273dbd60c64f79202635e4203bdc0b0c7f97e5df42184bdb64\"" Oct 2 20:00:35.852413 env[1631]: time="2023-10-02T20:00:35.852375274Z" level=info msg="StartContainer for \"dcab45df9ae2a4273dbd60c64f79202635e4203bdc0b0c7f97e5df42184bdb64\"" Oct 2 20:00:35.883228 systemd[1]: Started cri-containerd-dcab45df9ae2a4273dbd60c64f79202635e4203bdc0b0c7f97e5df42184bdb64.scope. Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.903000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit: BPF prog-id=139 op=LOAD Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2398 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:35.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463616234356466396165326134323733646264363063363466373932 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2398 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:35.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463616234356466396165326134323733646264363063363466373932 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit: BPF prog-id=140 op=LOAD Oct 2 20:00:35.904000 audit[4159]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000210450 items=0 ppid=2398 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:35.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463616234356466396165326134323733646264363063363466373932 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit: BPF prog-id=141 op=LOAD Oct 2 20:00:35.904000 audit[4159]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000210498 items=0 ppid=2398 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:35.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463616234356466396165326134323733646264363063363466373932 Oct 2 20:00:35.904000 audit: BPF prog-id=141 op=UNLOAD Oct 2 20:00:35.904000 audit: BPF prog-id=140 op=UNLOAD Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { perfmon } for pid=4159 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit[4159]: AVC avc: denied { bpf } for pid=4159 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:00:35.904000 audit: BPF prog-id=142 op=LOAD Oct 2 20:00:35.904000 audit[4159]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002108a8 items=0 ppid=2398 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:00:35.904000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463616234356466396165326134323733646264363063363466373932 Oct 2 20:00:35.959363 env[1631]: time="2023-10-02T20:00:35.959315162Z" level=info msg="StartContainer for \"dcab45df9ae2a4273dbd60c64f79202635e4203bdc0b0c7f97e5df42184bdb64\" returns successfully" Oct 2 20:00:37.741449 kubelet[2779]: E1002 20:00:37.741415 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:38.303493 kubelet[2779]: E1002 20:00:38.303423 2779 controller.go:189] failed to update lease, error: Put "https://172.31.29.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-37?timeout=10s": context deadline exceeded (Client.Timeout exceeded while awaiting headers) Oct 2 20:00:42.742593 kubelet[2779]: E1002 20:00:42.742557 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:47.744193 kubelet[2779]: E1002 20:00:47.744166 2779 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:00:47.990000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:47.993415 kernel: kauditd_printk_skb: 114 callbacks suppressed Oct 2 20:00:47.993505 kernel: audit: type=1400 audit(1696276847.990:1420): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:47.990000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0032687c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.007801 kernel: audit: type=1300 audit(1696276847.990:1420): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0032687c0 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.007971 kernel: audit: type=1327 audit(1696276847.990:1420): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:47.990000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.002000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.020651 kernel: audit: type=1400 audit(1696276848.002:1421): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.020795 kernel: audit: type=1300 audit(1696276848.002:1421): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008c97170 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.002000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008c97170 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.002000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.045850 kernel: audit: type=1327 audit(1696276848.002:1421): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.046002 kernel: audit: type=1400 audit(1696276848.003:1422): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.003000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521009 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.057488 kernel: audit: type=1300 audit(1696276848.003:1422): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c002b0f280 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.003000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c002b0f280 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.069760 kernel: audit: type=1327 audit(1696276848.003:1422): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.003000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.078097 kernel: audit: type=1400 audit(1696276848.003:1423): avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.003000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521280 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.003000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006fad080 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.003000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.003000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521276 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.003000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006fad140 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.003000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.004000 audit[2620]: AVC avc: denied { watch } for pid=2620 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:00:48.004000 audit[2620]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c006fad260 a2=fc6 a3=0 items=0 ppid=2375 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c80,c680 key=(null) Oct 2 20:00:48.004000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32392E3337002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:00:48.305109 kubelet[2779]: E1002 20:00:48.304943 2779 controller.go:189] failed to update lease, error: Put "https://172.31.29.37:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-29-37?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers)