Oct 2 19:53:33.189899 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:53:33.189942 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:53:33.189956 kernel: BIOS-provided physical RAM map: Oct 2 19:53:33.189967 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:53:33.189977 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:53:33.189987 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:53:33.190001 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 19:53:33.190012 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 19:53:33.190022 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 19:53:33.190031 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:53:33.190042 kernel: NX (Execute Disable) protection: active Oct 2 19:53:33.190051 kernel: SMBIOS 2.7 present. Oct 2 19:53:33.190062 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 19:53:33.190072 kernel: Hypervisor detected: KVM Oct 2 19:53:33.190088 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:53:33.190099 kernel: kvm-clock: cpu 0, msr 38f8a001, primary cpu clock Oct 2 19:53:33.190110 kernel: kvm-clock: using sched offset of 6781588568 cycles Oct 2 19:53:33.190123 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:53:33.190135 kernel: tsc: Detected 2499.998 MHz processor Oct 2 19:53:33.190146 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:53:33.190160 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:53:33.190171 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 19:53:33.190183 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:53:33.190194 kernel: Using GB pages for direct mapping Oct 2 19:53:33.190205 kernel: ACPI: Early table checksum verification disabled Oct 2 19:53:33.190216 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 19:53:33.190228 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 19:53:33.190239 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:53:33.190250 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 19:53:33.190264 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 19:53:33.190276 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:53:33.190287 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:53:33.190299 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 19:53:33.190310 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:53:33.190321 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 19:53:33.190333 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 19:53:33.190488 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:53:33.190504 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 19:53:33.190516 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 19:53:33.190528 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 19:53:33.190545 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 19:53:33.190557 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 19:53:33.190570 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 19:53:33.190582 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 19:53:33.190597 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 19:53:33.190609 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 19:53:33.190621 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 19:53:33.190633 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:53:33.190645 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:53:33.190657 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 19:53:33.190670 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 19:53:33.190682 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 19:53:33.190697 kernel: Zone ranges: Oct 2 19:53:33.190709 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:53:33.190770 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 19:53:33.190783 kernel: Normal empty Oct 2 19:53:33.190806 kernel: Movable zone start for each node Oct 2 19:53:33.190818 kernel: Early memory node ranges Oct 2 19:53:33.190830 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:53:33.190842 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 19:53:33.190855 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 19:53:33.190871 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:53:33.190883 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:53:33.190895 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 19:53:33.190908 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 19:53:33.190919 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:53:33.190932 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 19:53:33.190944 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:53:33.190957 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:53:33.190968 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:53:33.190983 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:53:33.190994 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:53:33.191006 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:53:33.191019 kernel: TSC deadline timer available Oct 2 19:53:33.191031 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:53:33.191043 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 19:53:33.191055 kernel: Booting paravirtualized kernel on KVM Oct 2 19:53:33.191067 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:53:33.191080 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:53:33.191094 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:53:33.191107 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:53:33.191157 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:53:33.191172 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 19:53:33.191255 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:53:33.191267 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:53:33.191280 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 19:53:33.191292 kernel: Policy zone: DMA32 Oct 2 19:53:33.191306 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:53:33.191323 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:53:33.191336 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:53:33.191348 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:53:33.191360 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:53:33.191374 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 19:53:33.191386 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:53:33.191398 kernel: Kernel/User page tables isolation: enabled Oct 2 19:53:33.191410 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:53:33.191425 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:53:33.191436 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:53:33.191450 kernel: rcu: RCU event tracing is enabled. Oct 2 19:53:33.191461 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:53:33.191474 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:53:33.191486 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:53:33.191498 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:53:33.191511 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:53:33.191522 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:53:33.191537 kernel: random: crng init done Oct 2 19:53:33.191548 kernel: Console: colour VGA+ 80x25 Oct 2 19:53:33.191560 kernel: printk: console [ttyS0] enabled Oct 2 19:53:33.191573 kernel: ACPI: Core revision 20210730 Oct 2 19:53:33.191584 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 19:53:33.191597 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:53:33.191608 kernel: x2apic enabled Oct 2 19:53:33.191620 kernel: Switched APIC routing to physical x2apic. Oct 2 19:53:33.191633 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Oct 2 19:53:33.191645 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499998) Oct 2 19:53:33.191661 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:53:33.191673 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:53:33.191717 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:53:33.191738 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:53:33.191753 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:53:33.191788 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:53:33.191812 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:53:33.191825 kernel: RETBleed: Vulnerable Oct 2 19:53:33.191838 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:53:33.191874 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:53:33.191887 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:53:33.191900 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:53:33.191913 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:53:33.191929 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:53:33.191965 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:53:33.191979 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 19:53:33.191992 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 19:53:33.192004 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:53:33.192039 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:53:33.192055 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:53:33.192067 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 19:53:33.192080 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:53:33.192093 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 19:53:33.192132 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 19:53:33.192144 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 19:53:33.192157 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 19:53:33.192170 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 19:53:33.192182 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 19:53:33.192221 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 19:53:33.192234 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:53:33.192250 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:53:33.192263 kernel: LSM: Security Framework initializing Oct 2 19:53:33.192494 kernel: SELinux: Initializing. Oct 2 19:53:33.192512 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:53:33.192526 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:53:33.192539 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:53:33.192553 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:53:33.192567 kernel: signal: max sigframe size: 3632 Oct 2 19:53:33.192580 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:53:33.192616 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:53:33.192629 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:53:33.192646 kernel: x86: Booting SMP configuration: Oct 2 19:53:33.192825 kernel: .... node #0, CPUs: #1 Oct 2 19:53:33.192840 kernel: kvm-clock: cpu 1, msr 38f8a041, secondary cpu clock Oct 2 19:53:33.192877 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 19:53:33.192892 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 19:53:33.192906 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:53:33.192919 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:53:33.192955 kernel: smpboot: Max logical packages: 1 Oct 2 19:53:33.192973 kernel: smpboot: Total of 2 processors activated (9999.99 BogoMIPS) Oct 2 19:53:33.192986 kernel: devtmpfs: initialized Oct 2 19:53:33.193000 kernel: x86/mm: Memory block size: 128MB Oct 2 19:53:33.193013 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:53:33.193027 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:53:33.193064 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:53:33.193078 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:53:33.193091 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:53:33.193105 kernel: audit: type=2000 audit(1696276412.210:1): state=initialized audit_enabled=0 res=1 Oct 2 19:53:33.193121 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:53:33.193135 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:53:33.193148 kernel: cpuidle: using governor menu Oct 2 19:53:33.193161 kernel: ACPI: bus type PCI registered Oct 2 19:53:33.193277 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:53:33.193292 kernel: dca service started, version 1.12.1 Oct 2 19:53:33.193307 kernel: PCI: Using configuration type 1 for base access Oct 2 19:53:33.193321 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:53:33.193335 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:53:33.193351 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:53:33.193365 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:53:33.193378 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:53:33.193717 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:53:33.193736 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:53:33.193748 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:53:33.193762 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:53:33.193775 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:53:33.193789 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 19:53:33.193819 kernel: ACPI: Interpreter enabled Oct 2 19:53:33.193831 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:53:33.193844 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:53:33.193857 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:53:33.193870 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 19:53:33.193883 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:53:33.194141 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:53:33.194271 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:53:33.194292 kernel: acpiphp: Slot [3] registered Oct 2 19:53:33.194398 kernel: acpiphp: Slot [4] registered Oct 2 19:53:33.194413 kernel: acpiphp: Slot [5] registered Oct 2 19:53:33.194621 kernel: acpiphp: Slot [6] registered Oct 2 19:53:33.194642 kernel: acpiphp: Slot [7] registered Oct 2 19:53:33.194687 kernel: acpiphp: Slot [8] registered Oct 2 19:53:33.194702 kernel: acpiphp: Slot [9] registered Oct 2 19:53:33.194715 kernel: acpiphp: Slot [10] registered Oct 2 19:53:33.194728 kernel: acpiphp: Slot [11] registered Oct 2 19:53:33.194746 kernel: acpiphp: Slot [12] registered Oct 2 19:53:33.194759 kernel: acpiphp: Slot [13] registered Oct 2 19:53:33.194773 kernel: acpiphp: Slot [14] registered Oct 2 19:53:33.194786 kernel: acpiphp: Slot [15] registered Oct 2 19:53:33.209040 kernel: acpiphp: Slot [16] registered Oct 2 19:53:33.209059 kernel: acpiphp: Slot [17] registered Oct 2 19:53:33.209073 kernel: acpiphp: Slot [18] registered Oct 2 19:53:33.209086 kernel: acpiphp: Slot [19] registered Oct 2 19:53:33.209100 kernel: acpiphp: Slot [20] registered Oct 2 19:53:33.209119 kernel: acpiphp: Slot [21] registered Oct 2 19:53:33.209133 kernel: acpiphp: Slot [22] registered Oct 2 19:53:33.209146 kernel: acpiphp: Slot [23] registered Oct 2 19:53:33.209159 kernel: acpiphp: Slot [24] registered Oct 2 19:53:33.209172 kernel: acpiphp: Slot [25] registered Oct 2 19:53:33.209185 kernel: acpiphp: Slot [26] registered Oct 2 19:53:33.209198 kernel: acpiphp: Slot [27] registered Oct 2 19:53:33.210074 kernel: acpiphp: Slot [28] registered Oct 2 19:53:33.210090 kernel: acpiphp: Slot [29] registered Oct 2 19:53:33.210128 kernel: acpiphp: Slot [30] registered Oct 2 19:53:33.210148 kernel: acpiphp: Slot [31] registered Oct 2 19:53:33.210161 kernel: PCI host bridge to bus 0000:00 Oct 2 19:53:33.210514 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:53:33.211122 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:53:33.211310 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:53:33.211571 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:53:33.211725 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:53:33.211881 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:53:33.212010 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:53:33.212174 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 19:53:33.212295 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 19:53:33.212413 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 19:53:33.212534 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 19:53:33.212654 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 19:53:33.212778 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 19:53:33.213048 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 19:53:33.213170 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 19:53:33.213290 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 19:53:33.213406 kernel: pci 0000:00:01.3: quirk_piix4_acpi+0x0/0x170 took 11718 usecs Oct 2 19:53:33.213653 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 19:53:33.223836 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 19:53:33.224088 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 19:53:33.224259 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:53:33.224401 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:53:33.224687 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 19:53:33.224844 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:53:33.224966 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 19:53:33.224990 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:53:33.225004 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:53:33.225017 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:53:33.225030 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:53:33.225043 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:53:33.225057 kernel: iommu: Default domain type: Translated Oct 2 19:53:33.225071 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:53:33.225188 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 19:53:33.225309 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:53:33.225433 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 19:53:33.225452 kernel: vgaarb: loaded Oct 2 19:53:33.225465 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:53:33.225478 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:53:33.225492 kernel: PTP clock support registered Oct 2 19:53:33.225504 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:53:33.225517 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:53:33.225532 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:53:33.225547 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 19:53:33.225560 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 19:53:33.225573 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 19:53:33.225586 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:53:33.225599 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:53:33.226119 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:53:33.226146 kernel: pnp: PnP ACPI init Oct 2 19:53:33.226161 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:53:33.226174 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:53:33.226193 kernel: NET: Registered PF_INET protocol family Oct 2 19:53:33.226207 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:53:33.226221 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:53:33.226235 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:53:33.226249 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:53:33.226262 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:53:33.226276 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:53:33.226289 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:53:33.226302 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:53:33.226318 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:53:33.226331 kernel: NET: Registered PF_XDP protocol family Oct 2 19:53:33.226478 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:53:33.226592 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:53:33.226700 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:53:33.226817 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:53:33.226994 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:53:33.227352 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:53:33.227380 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:53:33.227394 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:53:33.227408 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240937b9988, max_idle_ns: 440795218083 ns Oct 2 19:53:33.227421 kernel: clocksource: Switched to clocksource tsc Oct 2 19:53:33.227434 kernel: Initialise system trusted keyrings Oct 2 19:53:33.227448 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:53:33.227461 kernel: Key type asymmetric registered Oct 2 19:53:33.227473 kernel: Asymmetric key parser 'x509' registered Oct 2 19:53:33.227488 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:53:33.227501 kernel: io scheduler mq-deadline registered Oct 2 19:53:33.227513 kernel: io scheduler kyber registered Oct 2 19:53:33.227526 kernel: io scheduler bfq registered Oct 2 19:53:33.227539 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:53:33.227551 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:53:33.227564 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:53:33.227576 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:53:33.227589 kernel: i8042: Warning: Keylock active Oct 2 19:53:33.227605 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:53:33.227680 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:53:33.227888 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 19:53:33.228019 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 19:53:33.228199 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T19:53:32 UTC (1696276412) Oct 2 19:53:33.228309 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 19:53:33.228326 kernel: intel_pstate: CPU model not supported Oct 2 19:53:33.228339 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:53:33.228356 kernel: Segment Routing with IPv6 Oct 2 19:53:33.228369 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:53:33.228382 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:53:33.228396 kernel: Key type dns_resolver registered Oct 2 19:53:33.228409 kernel: IPI shorthand broadcast: enabled Oct 2 19:53:33.228422 kernel: sched_clock: Marking stable (594333735, 328334692)->(1067217078, -144548651) Oct 2 19:53:33.228436 kernel: registered taskstats version 1 Oct 2 19:53:33.228448 kernel: Loading compiled-in X.509 certificates Oct 2 19:53:33.228461 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:53:33.228477 kernel: Key type .fscrypt registered Oct 2 19:53:33.228490 kernel: Key type fscrypt-provisioning registered Oct 2 19:53:33.228503 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:53:33.228517 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:53:33.228530 kernel: ima: No architecture policies found Oct 2 19:53:33.228543 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:53:33.228555 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:53:33.228568 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:53:33.228581 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:53:33.228597 kernel: Run /init as init process Oct 2 19:53:33.228610 kernel: with arguments: Oct 2 19:53:33.228623 kernel: /init Oct 2 19:53:33.228636 kernel: with environment: Oct 2 19:53:33.228649 kernel: HOME=/ Oct 2 19:53:33.228661 kernel: TERM=linux Oct 2 19:53:33.228673 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:53:33.228690 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:53:33.228709 systemd[1]: Detected virtualization amazon. Oct 2 19:53:33.228723 systemd[1]: Detected architecture x86-64. Oct 2 19:53:33.228736 systemd[1]: Running in initrd. Oct 2 19:53:33.228750 systemd[1]: No hostname configured, using default hostname. Oct 2 19:53:33.228777 systemd[1]: Hostname set to . Oct 2 19:53:33.233869 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:53:33.233896 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:53:33.233913 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:53:33.233928 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:53:33.233942 systemd[1]: Reached target cryptsetup.target. Oct 2 19:53:33.233957 systemd[1]: Reached target paths.target. Oct 2 19:53:33.233971 systemd[1]: Reached target slices.target. Oct 2 19:53:33.233985 systemd[1]: Reached target swap.target. Oct 2 19:53:33.233998 systemd[1]: Reached target timers.target. Oct 2 19:53:33.234017 systemd[1]: Listening on iscsid.socket. Oct 2 19:53:33.234031 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:53:33.234046 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:53:33.234060 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:53:33.234074 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:53:33.234092 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:53:33.234106 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:53:33.234120 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:53:33.234137 systemd[1]: Reached target sockets.target. Oct 2 19:53:33.234151 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:53:33.234165 systemd[1]: Finished network-cleanup.service. Oct 2 19:53:33.234179 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:53:33.234194 systemd[1]: Starting systemd-journald.service... Oct 2 19:53:33.234208 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:53:33.234222 systemd[1]: Starting systemd-resolved.service... Oct 2 19:53:33.234238 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:53:33.234252 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:53:33.234269 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:53:33.234290 systemd-journald[185]: Journal started Oct 2 19:53:33.234378 systemd-journald[185]: Runtime Journal (/run/log/journal/ec237648aba5c98d76bec2b017844395) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:53:33.184938 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 19:53:33.332195 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:53:33.332230 kernel: Bridge firewalling registered Oct 2 19:53:33.332247 kernel: SCSI subsystem initialized Oct 2 19:53:33.332264 systemd[1]: Started systemd-journald.service. Oct 2 19:53:33.332286 kernel: audit: type=1130 audit(1696276413.309:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.332310 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:53:33.332331 kernel: audit: type=1130 audit(1696276413.320:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.332350 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:53:33.332366 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:53:33.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.256367 systemd-resolved[187]: Positive Trust Anchors: Oct 2 19:53:33.256380 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:53:33.256428 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:53:33.260751 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 19:53:33.271453 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 19:53:33.321901 systemd[1]: Started systemd-resolved.service. Oct 2 19:53:33.353609 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 19:53:33.369173 kernel: audit: type=1130 audit(1696276413.353:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.353916 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:53:33.361064 systemd[1]: Reached target nss-lookup.target. Oct 2 19:53:33.361979 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:53:33.362840 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:53:33.363283 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:53:33.364646 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:53:33.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.394397 kernel: audit: type=1130 audit(1696276413.360:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.385489 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:53:33.392008 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:53:33.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.399628 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:53:33.414059 kernel: audit: type=1130 audit(1696276413.360:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.414142 kernel: audit: type=1130 audit(1696276413.391:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.414197 kernel: audit: type=1130 audit(1696276413.391:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.423212 kernel: audit: type=1130 audit(1696276413.418:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.422756 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:53:33.434350 dracut-cmdline[207]: dracut-dracut-053 Oct 2 19:53:33.437712 dracut-cmdline[207]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:53:33.554821 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:53:33.575857 kernel: iscsi: registered transport (tcp) Oct 2 19:53:33.607100 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:53:33.607176 kernel: QLogic iSCSI HBA Driver Oct 2 19:53:33.655983 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:53:33.666893 kernel: audit: type=1130 audit(1696276413.657:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:33.663029 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:53:33.731319 kernel: raid6: avx512x4 gen() 12339 MB/s Oct 2 19:53:33.749269 kernel: raid6: avx512x4 xor() 2745 MB/s Oct 2 19:53:33.767089 kernel: raid6: avx512x2 gen() 5334 MB/s Oct 2 19:53:33.784937 kernel: raid6: avx512x2 xor() 16363 MB/s Oct 2 19:53:33.802840 kernel: raid6: avx512x1 gen() 13324 MB/s Oct 2 19:53:33.823846 kernel: raid6: avx512x1 xor() 14059 MB/s Oct 2 19:53:33.843827 kernel: raid6: avx2x4 gen() 7026 MB/s Oct 2 19:53:33.861115 kernel: raid6: avx2x4 xor() 2632 MB/s Oct 2 19:53:33.877834 kernel: raid6: avx2x2 gen() 10621 MB/s Oct 2 19:53:33.897126 kernel: raid6: avx2x2 xor() 7856 MB/s Oct 2 19:53:33.914843 kernel: raid6: avx2x1 gen() 7023 MB/s Oct 2 19:53:33.932842 kernel: raid6: avx2x1 xor() 12145 MB/s Oct 2 19:53:33.950844 kernel: raid6: sse2x4 gen() 5983 MB/s Oct 2 19:53:33.968827 kernel: raid6: sse2x4 xor() 3122 MB/s Oct 2 19:53:33.986843 kernel: raid6: sse2x2 gen() 7770 MB/s Oct 2 19:53:34.003835 kernel: raid6: sse2x2 xor() 4743 MB/s Oct 2 19:53:34.022871 kernel: raid6: sse2x1 gen() 6118 MB/s Oct 2 19:53:34.043050 kernel: raid6: sse2x1 xor() 2545 MB/s Oct 2 19:53:34.043151 kernel: raid6: using algorithm avx512x1 gen() 13324 MB/s Oct 2 19:53:34.043172 kernel: raid6: .... xor() 14059 MB/s, rmw enabled Oct 2 19:53:34.044304 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:53:34.064833 kernel: xor: automatically using best checksumming function avx Oct 2 19:53:34.215820 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:53:34.228439 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:53:34.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:34.230000 audit: BPF prog-id=7 op=LOAD Oct 2 19:53:34.230000 audit: BPF prog-id=8 op=LOAD Oct 2 19:53:34.232370 systemd[1]: Starting systemd-udevd.service... Oct 2 19:53:34.273232 systemd-udevd[385]: Using default interface naming scheme 'v252'. Oct 2 19:53:34.281169 systemd[1]: Started systemd-udevd.service. Oct 2 19:53:34.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:34.290495 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:53:34.315584 dracut-pre-trigger[391]: rd.md=0: removing MD RAID activation Oct 2 19:53:34.376002 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:53:34.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:34.380130 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:53:34.451786 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:53:34.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:34.521812 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:53:34.558325 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:53:34.558392 kernel: AES CTR mode by8 optimization enabled Oct 2 19:53:34.593034 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:53:34.593250 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:53:34.593381 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 19:53:34.593517 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:95:30:be:a5:7f Oct 2 19:53:34.568766 (udev-worker)[443]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:53:34.750447 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:53:34.750697 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:53:34.750723 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:53:34.750868 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:53:34.750885 kernel: GPT:9289727 != 16777215 Oct 2 19:53:34.750900 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:53:34.750916 kernel: GPT:9289727 != 16777215 Oct 2 19:53:34.750932 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:53:34.750949 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:34.750966 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (445) Oct 2 19:53:34.723340 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:53:34.811526 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:53:34.814917 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:53:34.823720 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:53:34.834178 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:53:34.854635 systemd[1]: Starting disk-uuid.service... Oct 2 19:53:34.865952 disk-uuid[585]: Primary Header is updated. Oct 2 19:53:34.865952 disk-uuid[585]: Secondary Entries is updated. Oct 2 19:53:34.865952 disk-uuid[585]: Secondary Header is updated. Oct 2 19:53:34.871810 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:34.878842 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:35.883269 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:53:35.883934 disk-uuid[586]: The operation has completed successfully. Oct 2 19:53:36.016674 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:53:36.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.016804 systemd[1]: Finished disk-uuid.service. Oct 2 19:53:36.031165 systemd[1]: Starting verity-setup.service... Oct 2 19:53:36.068031 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:53:36.162693 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:53:36.165735 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:53:36.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.166080 systemd[1]: Finished verity-setup.service. Oct 2 19:53:36.280831 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:53:36.281648 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:53:36.282276 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:53:36.284961 systemd[1]: Starting ignition-setup.service... Oct 2 19:53:36.296516 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:53:36.311363 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:53:36.311436 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:53:36.311456 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:53:36.334821 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:53:36.349309 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:53:36.389741 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:53:36.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.391000 audit: BPF prog-id=9 op=LOAD Oct 2 19:53:36.392991 systemd[1]: Starting systemd-networkd.service... Oct 2 19:53:36.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.395767 systemd[1]: Finished ignition-setup.service. Oct 2 19:53:36.398561 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:53:36.422001 systemd-networkd[1097]: lo: Link UP Oct 2 19:53:36.422012 systemd-networkd[1097]: lo: Gained carrier Oct 2 19:53:36.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.422618 systemd-networkd[1097]: Enumeration completed Oct 2 19:53:36.422742 systemd[1]: Started systemd-networkd.service. Oct 2 19:53:36.423026 systemd-networkd[1097]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:53:36.425360 systemd[1]: Reached target network.target. Oct 2 19:53:36.428320 systemd[1]: Starting iscsiuio.service... Oct 2 19:53:36.440588 systemd[1]: Started iscsiuio.service. Oct 2 19:53:36.441863 systemd-networkd[1097]: eth0: Link UP Oct 2 19:53:36.442000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.441869 systemd-networkd[1097]: eth0: Gained carrier Oct 2 19:53:36.444681 systemd[1]: Starting iscsid.service... Oct 2 19:53:36.449862 iscsid[1103]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:53:36.452287 iscsid[1103]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:53:36.452287 iscsid[1103]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:53:36.452287 iscsid[1103]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:53:36.452287 iscsid[1103]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:53:36.452287 iscsid[1103]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:53:36.452625 systemd[1]: Started iscsid.service. Oct 2 19:53:36.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.472430 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:53:36.476170 systemd-networkd[1097]: eth0: DHCPv4 address 172.31.26.217/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:53:36.499571 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:53:36.501764 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:53:36.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:36.503741 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:53:36.506144 systemd[1]: Reached target remote-fs.target. Oct 2 19:53:36.509329 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:53:36.524012 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:53:36.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.065220 ignition[1098]: Ignition 2.14.0 Oct 2 19:53:37.065235 ignition[1098]: Stage: fetch-offline Oct 2 19:53:37.065378 ignition[1098]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.065427 ignition[1098]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.089399 ignition[1098]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.091257 ignition[1098]: Ignition finished successfully Oct 2 19:53:37.093582 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:53:37.102913 kernel: kauditd_printk_skb: 17 callbacks suppressed Oct 2 19:53:37.102946 kernel: audit: type=1130 audit(1696276417.095:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.102483 systemd[1]: Starting ignition-fetch.service... Oct 2 19:53:37.116060 ignition[1122]: Ignition 2.14.0 Oct 2 19:53:37.116074 ignition[1122]: Stage: fetch Oct 2 19:53:37.116271 ignition[1122]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.116304 ignition[1122]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.128059 ignition[1122]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.137184 ignition[1122]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.194114 ignition[1122]: INFO : PUT result: OK Oct 2 19:53:37.205166 ignition[1122]: DEBUG : parsed url from cmdline: "" Oct 2 19:53:37.205166 ignition[1122]: INFO : no config URL provided Oct 2 19:53:37.205166 ignition[1122]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:53:37.205166 ignition[1122]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:53:37.212175 ignition[1122]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.214092 ignition[1122]: INFO : PUT result: OK Oct 2 19:53:37.214092 ignition[1122]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:53:37.217305 ignition[1122]: INFO : GET result: OK Oct 2 19:53:37.218477 ignition[1122]: DEBUG : parsing config with SHA512: 8dbb0b728b1b84b2053e45662d83137faceb0d7d51df479c536e9dec98cbd35b8db0dcfaa702bd99c6902e43a04e546925e1788c70c8cdb9c770ccea3823c3a2 Oct 2 19:53:37.253053 unknown[1122]: fetched base config from "system" Oct 2 19:53:37.254502 unknown[1122]: fetched base config from "system" Oct 2 19:53:37.254512 unknown[1122]: fetched user config from "aws" Oct 2 19:53:37.261497 ignition[1122]: fetch: fetch complete Oct 2 19:53:37.261851 ignition[1122]: fetch: fetch passed Oct 2 19:53:37.261963 ignition[1122]: Ignition finished successfully Oct 2 19:53:37.267937 systemd[1]: Finished ignition-fetch.service. Oct 2 19:53:37.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.270548 systemd[1]: Starting ignition-kargs.service... Oct 2 19:53:37.279955 kernel: audit: type=1130 audit(1696276417.267:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.299954 ignition[1128]: Ignition 2.14.0 Oct 2 19:53:37.300033 ignition[1128]: Stage: kargs Oct 2 19:53:37.300255 ignition[1128]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.300285 ignition[1128]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.313145 ignition[1128]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.316033 ignition[1128]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.318042 ignition[1128]: INFO : PUT result: OK Oct 2 19:53:37.322033 ignition[1128]: kargs: kargs passed Oct 2 19:53:37.322116 ignition[1128]: Ignition finished successfully Oct 2 19:53:37.325290 systemd[1]: Finished ignition-kargs.service. Oct 2 19:53:37.327118 systemd[1]: Starting ignition-disks.service... Oct 2 19:53:37.324000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.336058 kernel: audit: type=1130 audit(1696276417.324:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.340562 ignition[1134]: Ignition 2.14.0 Oct 2 19:53:37.340575 ignition[1134]: Stage: disks Oct 2 19:53:37.340785 ignition[1134]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.340870 ignition[1134]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.353482 ignition[1134]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.355037 ignition[1134]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.357314 ignition[1134]: INFO : PUT result: OK Oct 2 19:53:37.360582 ignition[1134]: disks: disks passed Oct 2 19:53:37.360654 ignition[1134]: Ignition finished successfully Oct 2 19:53:37.362390 systemd[1]: Finished ignition-disks.service. Oct 2 19:53:37.363000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.364217 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:53:37.370996 kernel: audit: type=1130 audit(1696276417.363:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.368235 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:53:37.371037 systemd[1]: Reached target local-fs.target. Oct 2 19:53:37.371112 systemd[1]: Reached target sysinit.target. Oct 2 19:53:37.374438 systemd[1]: Reached target basic.target. Oct 2 19:53:37.377189 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:53:37.403009 systemd-fsck[1142]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:53:37.409336 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:53:37.411878 systemd[1]: Mounting sysroot.mount... Oct 2 19:53:37.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.420820 kernel: audit: type=1130 audit(1696276417.409:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.428844 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:53:37.428752 systemd[1]: Mounted sysroot.mount. Oct 2 19:53:37.431259 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:53:37.445895 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:53:37.448905 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:53:37.448980 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:53:37.449025 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:53:37.455893 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:53:37.467049 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:53:37.470218 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:53:37.481759 initrd-setup-root[1164]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:53:37.486750 initrd-setup-root[1172]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:53:37.495916 initrd-setup-root[1180]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:53:37.497908 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1159) Oct 2 19:53:37.505085 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:53:37.505156 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:53:37.505177 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:53:37.506718 initrd-setup-root[1189]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:53:37.529116 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:53:37.531971 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:53:37.697416 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:53:37.706119 kernel: audit: type=1130 audit(1696276417.698:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.700678 systemd[1]: Starting ignition-mount.service... Oct 2 19:53:37.707281 systemd[1]: Starting sysroot-boot.service... Oct 2 19:53:37.720917 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:53:37.721044 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:53:37.749893 systemd[1]: Finished sysroot-boot.service. Oct 2 19:53:37.757458 kernel: audit: type=1130 audit(1696276417.750:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.763648 ignition[1226]: INFO : Ignition 2.14.0 Oct 2 19:53:37.763648 ignition[1226]: INFO : Stage: mount Oct 2 19:53:37.766440 ignition[1226]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.766440 ignition[1226]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.776901 ignition[1226]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.779195 ignition[1226]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.781622 ignition[1226]: INFO : PUT result: OK Oct 2 19:53:37.787326 ignition[1226]: INFO : mount: mount passed Oct 2 19:53:37.788668 ignition[1226]: INFO : Ignition finished successfully Oct 2 19:53:37.791229 systemd[1]: Finished ignition-mount.service. Oct 2 19:53:37.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.793561 systemd[1]: Starting ignition-files.service... Oct 2 19:53:37.802880 kernel: audit: type=1130 audit(1696276417.792:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:37.807944 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:53:37.820812 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1234) Oct 2 19:53:37.824646 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:53:37.824701 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:53:37.824714 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:53:37.832819 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:53:37.836898 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:53:37.860205 ignition[1253]: INFO : Ignition 2.14.0 Oct 2 19:53:37.862324 ignition[1253]: INFO : Stage: files Oct 2 19:53:37.862324 ignition[1253]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:37.862324 ignition[1253]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:37.877094 ignition[1253]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:37.878976 ignition[1253]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:37.881048 ignition[1253]: INFO : PUT result: OK Oct 2 19:53:37.885251 ignition[1253]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:53:37.892771 ignition[1253]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:53:37.895258 ignition[1253]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:53:37.910049 ignition[1253]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:53:37.912432 ignition[1253]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:53:37.912432 ignition[1253]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:53:37.911326 unknown[1253]: wrote ssh authorized keys file for user: core Oct 2 19:53:37.918540 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:53:37.918540 ignition[1253]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:53:38.258281 ignition[1253]: INFO : GET result: OK Oct 2 19:53:38.392356 systemd-networkd[1097]: eth0: Gained IPv6LL Oct 2 19:53:38.556011 ignition[1253]: DEBUG : file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:53:38.559306 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:53:38.559306 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:53:38.559306 ignition[1253]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:53:38.647184 ignition[1253]: INFO : GET result: OK Oct 2 19:53:38.796305 ignition[1253]: DEBUG : file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:53:38.799510 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:53:38.799510 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:53:38.807195 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:53:38.807195 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:53:38.807195 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:38.820233 ignition[1253]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3821797460" Oct 2 19:53:38.827109 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1258) Oct 2 19:53:38.827168 ignition[1253]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3821797460": device or resource busy Oct 2 19:53:38.827168 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3821797460", trying btrfs: device or resource busy Oct 2 19:53:38.827168 ignition[1253]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3821797460" Oct 2 19:53:38.835049 ignition[1253]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3821797460" Oct 2 19:53:38.836883 ignition[1253]: INFO : op(3): [started] unmounting "/mnt/oem3821797460" Oct 2 19:53:38.836883 ignition[1253]: INFO : op(3): [finished] unmounting "/mnt/oem3821797460" Oct 2 19:53:38.840882 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:53:38.840882 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:53:38.840882 ignition[1253]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:53:38.846238 systemd[1]: mnt-oem3821797460.mount: Deactivated successfully. Oct 2 19:53:38.941557 ignition[1253]: INFO : GET result: OK Oct 2 19:53:40.365008 ignition[1253]: DEBUG : file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:53:40.368203 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:53:40.368203 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:53:40.368203 ignition[1253]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:53:40.431431 ignition[1253]: INFO : GET result: OK Oct 2 19:53:41.333582 ignition[1253]: DEBUG : file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:53:41.336485 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:53:41.336485 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:53:41.336485 ignition[1253]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:53:41.394084 ignition[1253]: INFO : GET result: OK Oct 2 19:53:41.967877 ignition[1253]: DEBUG : file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:53:41.971673 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:53:41.971673 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:53:41.971673 ignition[1253]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:53:42.128057 ignition[1253]: INFO : GET result: OK Oct 2 19:53:42.522653 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:53:42.525778 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:53:42.525778 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:53:42.525778 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:53:42.525778 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:53:42.539820 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:53:42.539820 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:42.546046 ignition[1253]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem694111231" Oct 2 19:53:42.549170 ignition[1253]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem694111231": device or resource busy Oct 2 19:53:42.549170 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem694111231", trying btrfs: device or resource busy Oct 2 19:53:42.549170 ignition[1253]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem694111231" Oct 2 19:53:42.549170 ignition[1253]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem694111231" Oct 2 19:53:42.549170 ignition[1253]: INFO : op(6): [started] unmounting "/mnt/oem694111231" Oct 2 19:53:42.549170 ignition[1253]: INFO : op(6): [finished] unmounting "/mnt/oem694111231" Oct 2 19:53:42.549170 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:53:42.549170 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:53:42.549170 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:42.592339 systemd[1]: mnt-oem694111231.mount: Deactivated successfully. Oct 2 19:53:42.605409 ignition[1253]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3920607178" Oct 2 19:53:42.607874 ignition[1253]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3920607178": device or resource busy Oct 2 19:53:42.607874 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3920607178", trying btrfs: device or resource busy Oct 2 19:53:42.607874 ignition[1253]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3920607178" Oct 2 19:53:42.622762 ignition[1253]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3920607178" Oct 2 19:53:42.625050 ignition[1253]: INFO : op(9): [started] unmounting "/mnt/oem3920607178" Oct 2 19:53:42.624950 systemd[1]: mnt-oem3920607178.mount: Deactivated successfully. Oct 2 19:53:42.631321 ignition[1253]: INFO : op(9): [finished] unmounting "/mnt/oem3920607178" Oct 2 19:53:42.633282 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:53:42.635721 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:53:42.635721 ignition[1253]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:53:42.645559 ignition[1253]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3886436699" Oct 2 19:53:42.647597 ignition[1253]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3886436699": device or resource busy Oct 2 19:53:42.647597 ignition[1253]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3886436699", trying btrfs: device or resource busy Oct 2 19:53:42.647597 ignition[1253]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3886436699" Oct 2 19:53:42.647597 ignition[1253]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3886436699" Oct 2 19:53:42.658559 ignition[1253]: INFO : op(c): [started] unmounting "/mnt/oem3886436699" Oct 2 19:53:42.658559 ignition[1253]: INFO : op(c): [finished] unmounting "/mnt/oem3886436699" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(12): [started] processing unit "nvidia.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(12): [finished] processing unit "nvidia.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(13): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(13): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:53:42.658559 ignition[1253]: INFO : files: op(18): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(1b): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(1b): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:53:42.707055 ignition[1253]: INFO : files: files passed Oct 2 19:53:42.707055 ignition[1253]: INFO : Ignition finished successfully Oct 2 19:53:42.743553 kernel: audit: type=1130 audit(1696276422.711:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.709008 systemd[1]: Finished ignition-files.service. Oct 2 19:53:42.719436 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:53:42.727231 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:53:42.728425 systemd[1]: Starting ignition-quench.service... Oct 2 19:53:42.754258 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:53:42.754510 systemd[1]: Finished ignition-quench.service. Oct 2 19:53:42.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.763558 initrd-setup-root-after-ignition[1279]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:53:42.773216 kernel: audit: type=1130 audit(1696276422.758:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.773306 kernel: audit: type=1131 audit(1696276422.758:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.773669 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:53:42.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.773912 systemd[1]: Reached target ignition-complete.target. Oct 2 19:53:42.785047 kernel: audit: type=1130 audit(1696276422.772:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.784888 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:53:42.808402 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:53:42.808541 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:53:42.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.813665 systemd[1]: Reached target initrd-fs.target. Oct 2 19:53:42.822895 kernel: audit: type=1130 audit(1696276422.812:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.822938 kernel: audit: type=1131 audit(1696276422.812:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.826197 systemd[1]: Reached target initrd.target. Oct 2 19:53:42.827858 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:53:42.830302 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:53:42.854961 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:53:42.857174 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:53:42.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.867948 kernel: audit: type=1130 audit(1696276422.854:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.875642 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:53:42.876009 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:53:42.882331 systemd[1]: Stopped target timers.target. Oct 2 19:53:42.884834 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:53:42.893365 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:53:42.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.897149 systemd[1]: Stopped target initrd.target. Oct 2 19:53:42.921621 kernel: audit: type=1131 audit(1696276422.896:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.915029 systemd[1]: Stopped target basic.target. Oct 2 19:53:42.922212 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:53:42.925182 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:53:42.929118 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:53:42.931942 systemd[1]: Stopped target remote-fs.target. Oct 2 19:53:42.940084 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:53:42.946229 systemd[1]: Stopped target sysinit.target. Oct 2 19:53:42.950013 systemd[1]: Stopped target local-fs.target. Oct 2 19:53:42.950416 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:53:42.961035 systemd[1]: Stopped target swap.target. Oct 2 19:53:42.964177 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:53:42.967575 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:53:42.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.981235 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:53:42.991077 kernel: audit: type=1131 audit(1696276422.980:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.991280 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:53:42.991489 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:53:42.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.996834 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:53:43.004929 kernel: audit: type=1131 audit(1696276422.995:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:42.996994 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:53:43.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.005136 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:53:43.006787 systemd[1]: Stopped ignition-files.service. Oct 2 19:53:43.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.012684 systemd[1]: Stopping ignition-mount.service... Oct 2 19:53:43.013905 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:53:43.014138 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:53:43.021006 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:53:43.027047 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:53:43.027230 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:53:43.028910 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:53:43.029009 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:53:43.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.050583 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:53:43.052025 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:53:43.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.054623 ignition[1292]: INFO : Ignition 2.14.0 Oct 2 19:53:43.054623 ignition[1292]: INFO : Stage: umount Oct 2 19:53:43.057030 ignition[1292]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:53:43.057030 ignition[1292]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:53:43.070524 ignition[1292]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:53:43.072574 ignition[1292]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:53:43.076138 ignition[1292]: INFO : PUT result: OK Oct 2 19:53:43.076935 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:53:43.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.077049 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:53:43.084598 ignition[1292]: INFO : umount: umount passed Oct 2 19:53:43.085886 ignition[1292]: INFO : Ignition finished successfully Oct 2 19:53:43.087160 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:53:43.087276 systemd[1]: Stopped ignition-mount.service. Oct 2 19:53:43.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.089559 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:53:43.089715 systemd[1]: Stopped ignition-disks.service. Oct 2 19:53:43.095411 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:53:43.095490 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:53:43.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.098000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.098422 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:53:43.098529 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:53:43.099560 systemd[1]: Stopped target network.target. Oct 2 19:53:43.105529 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:53:43.105621 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:53:43.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.112416 systemd[1]: Stopped target paths.target. Oct 2 19:53:43.114553 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:53:43.118149 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:53:43.120634 systemd[1]: Stopped target slices.target. Oct 2 19:53:43.122382 systemd[1]: Stopped target sockets.target. Oct 2 19:53:43.124316 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:53:43.124433 systemd[1]: Closed iscsid.socket. Oct 2 19:53:43.127054 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:53:43.127102 systemd[1]: Closed iscsiuio.socket. Oct 2 19:53:43.130576 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:53:43.130705 systemd[1]: Stopped ignition-setup.service. Oct 2 19:53:43.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.134667 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:53:43.134742 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:53:43.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.139038 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:53:43.141860 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:53:43.143014 systemd-networkd[1097]: eth0: DHCPv6 lease lost Oct 2 19:53:43.144749 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:53:43.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.146009 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:53:43.153000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:53:43.149981 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:53:43.150094 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:53:43.157076 systemd[1]: Stopping network-cleanup.service... Oct 2 19:53:43.160558 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:53:43.160642 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:53:43.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.164716 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:53:43.166221 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:53:43.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.168776 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:53:43.168866 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:53:43.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.173303 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:53:43.175695 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:53:43.175823 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:53:43.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.182033 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:53:43.181000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:53:43.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.183994 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:53:43.185614 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:53:43.185681 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:53:43.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.189082 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:53:43.189130 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:53:43.191745 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:53:43.191820 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:53:43.192119 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:53:43.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:43.192218 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:53:43.192362 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:53:43.192497 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:53:43.193928 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:53:43.194355 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:53:43.194505 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:53:43.195073 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:53:43.195438 systemd[1]: Stopped network-cleanup.service. Oct 2 19:53:43.206946 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:53:43.207065 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:53:43.209185 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:53:43.214352 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:53:43.238460 systemd[1]: Switching root. Oct 2 19:53:43.270399 iscsid[1103]: iscsid shutting down. Oct 2 19:53:43.272989 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 19:53:43.273057 systemd-journald[185]: Journal stopped Oct 2 19:53:49.891631 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:53:49.891712 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:53:49.891731 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:53:49.891750 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:53:49.891767 kernel: SELinux: policy capability open_perms=1 Oct 2 19:53:49.891787 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:53:49.891813 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:53:49.891827 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:53:49.891864 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:53:49.891881 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:53:49.891906 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:53:49.891930 systemd[1]: Successfully loaded SELinux policy in 163.043ms. Oct 2 19:53:49.891967 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 26.589ms. Oct 2 19:53:49.891990 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:53:49.892010 systemd[1]: Detected virtualization amazon. Oct 2 19:53:49.892028 systemd[1]: Detected architecture x86-64. Oct 2 19:53:49.892059 systemd[1]: Detected first boot. Oct 2 19:53:49.892077 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:53:49.892099 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:53:49.892118 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:53:49.892137 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:53:49.892157 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:53:49.892176 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 19:53:49.892194 kernel: audit: type=1334 audit(1696276429.501:83): prog-id=12 op=LOAD Oct 2 19:53:49.892212 kernel: audit: type=1334 audit(1696276429.501:84): prog-id=3 op=UNLOAD Oct 2 19:53:49.892232 kernel: audit: type=1334 audit(1696276429.502:85): prog-id=13 op=LOAD Oct 2 19:53:49.892250 kernel: audit: type=1334 audit(1696276429.506:86): prog-id=14 op=LOAD Oct 2 19:53:49.892267 kernel: audit: type=1334 audit(1696276429.506:87): prog-id=4 op=UNLOAD Oct 2 19:53:49.892285 kernel: audit: type=1334 audit(1696276429.506:88): prog-id=5 op=UNLOAD Oct 2 19:53:49.892303 kernel: audit: type=1334 audit(1696276429.507:89): prog-id=15 op=LOAD Oct 2 19:53:49.892320 kernel: audit: type=1334 audit(1696276429.507:90): prog-id=12 op=UNLOAD Oct 2 19:53:49.892337 kernel: audit: type=1334 audit(1696276429.509:91): prog-id=16 op=LOAD Oct 2 19:53:49.892355 kernel: audit: type=1334 audit(1696276429.512:92): prog-id=17 op=LOAD Oct 2 19:53:49.892375 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:53:49.893423 systemd[1]: Stopped iscsiuio.service. Oct 2 19:53:49.893461 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:53:49.893483 systemd[1]: Stopped iscsid.service. Oct 2 19:53:49.893502 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:53:49.893521 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:53:49.893540 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:53:49.893561 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:53:49.893587 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:53:49.893611 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:53:49.893630 systemd[1]: Created slice system-getty.slice. Oct 2 19:53:49.893656 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:53:49.893676 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:53:49.893696 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:53:49.893715 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:53:49.893735 systemd[1]: Created slice user.slice. Oct 2 19:53:49.893754 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:53:49.893773 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:53:49.893825 systemd[1]: Set up automount boot.automount. Oct 2 19:53:49.893844 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:53:49.893865 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:53:49.893947 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:53:49.893967 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:53:49.893986 systemd[1]: Reached target integritysetup.target. Oct 2 19:53:49.894005 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:53:49.894024 systemd[1]: Reached target remote-fs.target. Oct 2 19:53:49.894042 systemd[1]: Reached target slices.target. Oct 2 19:53:49.894064 systemd[1]: Reached target swap.target. Oct 2 19:53:49.894083 systemd[1]: Reached target torcx.target. Oct 2 19:53:49.894102 systemd[1]: Reached target veritysetup.target. Oct 2 19:53:49.894120 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:53:49.894140 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:53:49.894159 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:53:49.894181 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:53:49.894208 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:53:49.894227 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:53:49.894246 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:53:49.894265 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:53:49.894284 systemd[1]: Mounting media.mount... Oct 2 19:53:49.894303 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:53:49.894323 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:53:49.894485 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:53:49.894516 systemd[1]: Mounting tmp.mount... Oct 2 19:53:49.894551 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:53:49.894572 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:53:49.894588 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:53:49.894606 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:53:49.894624 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:53:49.894642 systemd[1]: Starting modprobe@drm.service... Oct 2 19:53:49.894661 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:53:49.895711 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:53:49.895740 systemd[1]: Starting modprobe@loop.service... Oct 2 19:53:49.895762 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:53:49.895784 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:53:49.895812 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:53:49.895831 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:53:49.895852 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:53:49.895872 systemd[1]: Stopped systemd-journald.service. Oct 2 19:53:49.895892 systemd[1]: Starting systemd-journald.service... Oct 2 19:53:49.895918 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:53:49.895939 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:53:49.895960 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:53:49.895980 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:53:49.896002 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:53:49.896022 systemd[1]: Stopped verity-setup.service. Oct 2 19:53:49.896043 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:53:49.896064 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:53:49.896145 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:53:49.896174 systemd[1]: Mounted media.mount. Oct 2 19:53:49.896196 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:53:49.896217 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:53:49.896237 systemd[1]: Mounted tmp.mount. Oct 2 19:53:49.896258 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:53:49.896279 kernel: fuse: init (API version 7.34) Oct 2 19:53:49.896301 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:53:49.896321 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:53:49.896347 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:53:49.896368 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:53:49.896388 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:53:49.896409 systemd[1]: Finished modprobe@drm.service. Oct 2 19:53:49.896436 systemd-journald[1405]: Journal started Oct 2 19:53:49.896519 systemd-journald[1405]: Runtime Journal (/run/log/journal/ec237648aba5c98d76bec2b017844395) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:53:44.101000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:53:44.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:53:49.898994 systemd[1]: Started systemd-journald.service. Oct 2 19:53:44.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:53:44.290000 audit: BPF prog-id=10 op=LOAD Oct 2 19:53:44.290000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:53:44.290000 audit: BPF prog-id=11 op=LOAD Oct 2 19:53:44.290000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:53:49.501000 audit: BPF prog-id=12 op=LOAD Oct 2 19:53:49.501000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:53:49.502000 audit: BPF prog-id=13 op=LOAD Oct 2 19:53:49.506000 audit: BPF prog-id=14 op=LOAD Oct 2 19:53:49.506000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:53:49.506000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:53:49.507000 audit: BPF prog-id=15 op=LOAD Oct 2 19:53:49.507000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:53:49.509000 audit: BPF prog-id=16 op=LOAD Oct 2 19:53:49.512000 audit: BPF prog-id=17 op=LOAD Oct 2 19:53:49.512000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:53:49.512000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:53:49.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.522000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:53:49.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.791000 audit: BPF prog-id=18 op=LOAD Oct 2 19:53:49.791000 audit: BPF prog-id=19 op=LOAD Oct 2 19:53:49.792000 audit: BPF prog-id=20 op=LOAD Oct 2 19:53:49.792000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:53:49.792000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:53:49.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.887000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:53:49.887000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffc3e158ab0 a2=4000 a3=7ffc3e158b4c items=0 ppid=1 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:49.887000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:53:49.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.624891 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:53:49.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.907000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.499230 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:53:49.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:44.625787 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:53:49.915879 kernel: loop: module loaded Oct 2 19:53:49.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.515472 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:53:44.625833 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:53:49.902644 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:53:44.625879 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:53:49.902925 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:53:44.625968 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:53:49.905356 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:53:44.626017 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:53:49.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.971249 systemd-journald[1405]: Time spent on flushing to /var/log/journal/ec237648aba5c98d76bec2b017844395 is 119.709ms for 1170 entries. Oct 2 19:53:49.971249 systemd-journald[1405]: System Journal (/var/log/journal/ec237648aba5c98d76bec2b017844395) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:53:50.121762 systemd-journald[1405]: Received client request to flush runtime journal. Oct 2 19:53:49.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:49.905530 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:53:44.626037 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:53:49.907015 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:53:44.626417 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:53:49.908637 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:53:44.626476 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:53:49.911452 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:53:44.626567 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:53:49.913719 systemd[1]: Reached target network-pre.target. Oct 2 19:53:44.627528 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:53:49.917392 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:53:44.627630 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:53:49.924501 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:53:44.627660 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:53:49.925951 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:53:44.627684 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:53:49.928651 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:53:44.627710 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:53:49.931752 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:53:44.627732 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:44Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:53:49.936116 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:53:48.755819 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:48Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:49.938617 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:53:48.757220 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:48Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:49.942738 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:53:48.757341 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:48Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:49.951526 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:53:48.757526 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:48Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:53:49.954983 systemd[1]: Finished modprobe@loop.service. Oct 2 19:53:48.757580 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:48Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:53:49.957279 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:53:48.757648 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:53:48Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:53:49.958984 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:53:49.961549 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:53:49.989029 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:53:49.990702 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:53:50.002317 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:53:50.103618 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:53:50.108120 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:53:50.123012 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:53:50.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.158084 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:53:50.162883 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:53:50.175676 udevadm[1442]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:53:50.324247 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:53:50.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.901443 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:53:50.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:50.905000 audit: BPF prog-id=21 op=LOAD Oct 2 19:53:50.905000 audit: BPF prog-id=22 op=LOAD Oct 2 19:53:50.905000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:53:50.905000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:53:50.907645 systemd[1]: Starting systemd-udevd.service... Oct 2 19:53:50.964107 systemd-udevd[1443]: Using default interface naming scheme 'v252'. Oct 2 19:53:51.049947 systemd[1]: Started systemd-udevd.service. Oct 2 19:53:51.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.053000 audit: BPF prog-id=23 op=LOAD Oct 2 19:53:51.055317 systemd[1]: Starting systemd-networkd.service... Oct 2 19:53:51.072000 audit: BPF prog-id=24 op=LOAD Oct 2 19:53:51.072000 audit: BPF prog-id=25 op=LOAD Oct 2 19:53:51.072000 audit: BPF prog-id=26 op=LOAD Oct 2 19:53:51.074515 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:53:51.121742 (udev-worker)[1459]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:53:51.136343 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:53:51.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.151355 systemd[1]: Started systemd-userdbd.service. Oct 2 19:53:51.278000 audit[1444]: AVC avc: denied { confidentiality } for pid=1444 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:53:51.323986 systemd-networkd[1451]: lo: Link UP Oct 2 19:53:51.332929 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:53:51.332967 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:53:51.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.324001 systemd-networkd[1451]: lo: Gained carrier Oct 2 19:53:51.325019 systemd-networkd[1451]: Enumeration completed Oct 2 19:53:51.325152 systemd[1]: Started systemd-networkd.service. Oct 2 19:53:51.325289 systemd-networkd[1451]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:53:51.328838 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:53:51.331714 systemd-networkd[1451]: eth0: Link UP Oct 2 19:53:51.331902 systemd-networkd[1451]: eth0: Gained carrier Oct 2 19:53:51.341046 systemd-networkd[1451]: eth0: DHCPv4 address 172.31.26.217/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:53:51.278000 audit[1444]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55f7ec17e860 a1=32194 a2=7fc10ce7cbc5 a3=5 items=106 ppid=1443 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:51.278000 audit: CWD cwd="/" Oct 2 19:53:51.278000 audit: PATH item=0 name=(null) inode=14644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=1 name=(null) inode=14645 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=2 name=(null) inode=14644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=3 name=(null) inode=14646 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=4 name=(null) inode=14644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=5 name=(null) inode=14647 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=6 name=(null) inode=14647 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=7 name=(null) inode=14648 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=8 name=(null) inode=14647 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=9 name=(null) inode=14667 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=10 name=(null) inode=14647 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=11 name=(null) inode=14668 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=12 name=(null) inode=14647 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=13 name=(null) inode=14669 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=14 name=(null) inode=14647 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=15 name=(null) inode=14670 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=16 name=(null) inode=14644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=17 name=(null) inode=14671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=18 name=(null) inode=14671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=19 name=(null) inode=14672 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=20 name=(null) inode=14671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=21 name=(null) inode=14673 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=22 name=(null) inode=14671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=23 name=(null) inode=14674 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=24 name=(null) inode=14671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=25 name=(null) inode=14675 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=26 name=(null) inode=14671 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=27 name=(null) inode=14676 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=28 name=(null) inode=14644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=29 name=(null) inode=14677 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=30 name=(null) inode=14677 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=31 name=(null) inode=14678 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=32 name=(null) inode=14677 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=33 name=(null) inode=14679 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=34 name=(null) inode=14677 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=35 name=(null) inode=14680 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=36 name=(null) inode=14677 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=37 name=(null) inode=14681 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=38 name=(null) inode=14677 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=39 name=(null) inode=14682 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=40 name=(null) inode=14644 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=41 name=(null) inode=14683 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=42 name=(null) inode=14683 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=43 name=(null) inode=14684 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=44 name=(null) inode=14683 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=45 name=(null) inode=14685 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=46 name=(null) inode=14683 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=47 name=(null) inode=14686 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=48 name=(null) inode=14683 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=49 name=(null) inode=14687 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=50 name=(null) inode=14683 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=51 name=(null) inode=14688 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=52 name=(null) inode=40 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=53 name=(null) inode=14689 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=54 name=(null) inode=14689 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=55 name=(null) inode=14690 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=56 name=(null) inode=14689 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=57 name=(null) inode=14691 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=58 name=(null) inode=14689 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=59 name=(null) inode=14692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=60 name=(null) inode=14692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=61 name=(null) inode=14693 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=62 name=(null) inode=14692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=63 name=(null) inode=14694 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=64 name=(null) inode=14692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=65 name=(null) inode=14695 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=66 name=(null) inode=14692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=67 name=(null) inode=14696 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=68 name=(null) inode=14692 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=69 name=(null) inode=14697 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=70 name=(null) inode=14689 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=71 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=72 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=73 name=(null) inode=14699 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=74 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=75 name=(null) inode=14700 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=76 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=77 name=(null) inode=14701 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=78 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=79 name=(null) inode=14702 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=80 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=81 name=(null) inode=14703 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=82 name=(null) inode=14689 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=83 name=(null) inode=14704 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=84 name=(null) inode=14704 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=85 name=(null) inode=14705 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=86 name=(null) inode=14704 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=87 name=(null) inode=14706 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=88 name=(null) inode=14704 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=89 name=(null) inode=14707 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=90 name=(null) inode=14704 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=91 name=(null) inode=14708 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=92 name=(null) inode=14704 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=93 name=(null) inode=14709 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=94 name=(null) inode=14689 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=95 name=(null) inode=14710 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=96 name=(null) inode=14710 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=97 name=(null) inode=14711 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=98 name=(null) inode=14710 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=99 name=(null) inode=14712 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=100 name=(null) inode=14710 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=101 name=(null) inode=14713 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=102 name=(null) inode=14710 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=103 name=(null) inode=14714 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=104 name=(null) inode=14710 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PATH item=105 name=(null) inode=14715 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:53:51.278000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:53:51.379833 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:53:51.385092 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Oct 2 19:53:51.394823 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1456) Oct 2 19:53:51.402817 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 19:53:51.417861 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 19:53:51.428826 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 19:53:51.448871 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:53:51.544425 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:53:51.666438 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:53:51.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.671639 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:53:51.895647 lvm[1557]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:53:51.923024 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:53:51.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.924328 systemd[1]: Reached target cryptsetup.target. Oct 2 19:53:51.926887 systemd[1]: Starting lvm2-activation.service... Oct 2 19:53:51.932444 lvm[1558]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:53:51.956227 systemd[1]: Finished lvm2-activation.service. Oct 2 19:53:51.956000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:51.957668 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:53:51.958890 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:53:51.958930 systemd[1]: Reached target local-fs.target. Oct 2 19:53:51.960176 systemd[1]: Reached target machines.target. Oct 2 19:53:51.964441 systemd[1]: Starting ldconfig.service... Oct 2 19:53:51.966423 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:53:51.966474 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:53:51.968569 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:53:51.977434 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:53:51.989711 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:53:51.995232 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:53:51.995340 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:53:52.001094 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:53:52.019294 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1560 (bootctl) Oct 2 19:53:52.021287 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:53:52.039567 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:53:52.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.056354 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:53:52.066338 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:53:52.078987 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:53:52.204628 systemd-fsck[1570]: fsck.fat 4.2 (2021-01-31) Oct 2 19:53:52.204628 systemd-fsck[1570]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 19:53:52.206630 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:53:52.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.209831 systemd[1]: Mounting boot.mount... Oct 2 19:53:52.246770 systemd[1]: Mounted boot.mount. Oct 2 19:53:52.272191 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:53:52.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.389610 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:53:52.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.392439 systemd[1]: Starting audit-rules.service... Oct 2 19:53:52.396372 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:53:52.401911 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:53:52.405000 audit: BPF prog-id=27 op=LOAD Oct 2 19:53:52.409557 systemd[1]: Starting systemd-resolved.service... Oct 2 19:53:52.412000 audit: BPF prog-id=28 op=LOAD Oct 2 19:53:52.417357 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:53:52.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.429724 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:53:52.431901 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:53:52.433975 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:53:52.470000 audit[1589]: SYSTEM_BOOT pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.473257 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:53:52.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.539338 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:53:52.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:53:52.579000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:53:52.579000 audit[1604]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcbfa35560 a2=420 a3=0 items=0 ppid=1584 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:53:52.579000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:53:52.580973 augenrules[1604]: No rules Oct 2 19:53:52.581537 systemd[1]: Finished audit-rules.service. Oct 2 19:53:52.611527 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:53:52.612893 systemd[1]: Reached target time-set.target. Oct 2 19:53:52.670168 systemd-resolved[1587]: Positive Trust Anchors: Oct 2 19:53:52.670185 systemd-resolved[1587]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:53:52.670227 systemd-resolved[1587]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:53:53.557250 systemd-timesyncd[1588]: Contacted time server 99.119.214.210:123 (0.flatcar.pool.ntp.org). Oct 2 19:53:53.557410 systemd-timesyncd[1588]: Initial clock synchronization to Mon 2023-10-02 19:53:53.556690 UTC. Oct 2 19:53:53.716181 systemd-resolved[1587]: Defaulting to hostname 'linux'. Oct 2 19:53:53.720577 systemd[1]: Started systemd-resolved.service. Oct 2 19:53:53.722701 systemd[1]: Reached target network.target. Oct 2 19:53:53.724301 systemd[1]: Reached target nss-lookup.target. Oct 2 19:53:53.777689 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:53:53.778699 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:53:53.928444 systemd-networkd[1451]: eth0: Gained IPv6LL Oct 2 19:53:53.931250 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:53:53.932855 systemd[1]: Reached target network-online.target. Oct 2 19:53:54.239013 ldconfig[1559]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:53:54.244454 systemd[1]: Finished ldconfig.service. Oct 2 19:53:54.248219 systemd[1]: Starting systemd-update-done.service... Oct 2 19:53:54.263347 systemd[1]: Finished systemd-update-done.service. Oct 2 19:53:54.264957 systemd[1]: Reached target sysinit.target. Oct 2 19:53:54.266152 systemd[1]: Started motdgen.path. Oct 2 19:53:54.267272 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:53:54.268822 systemd[1]: Started logrotate.timer. Oct 2 19:53:54.269909 systemd[1]: Started mdadm.timer. Oct 2 19:53:54.270802 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:53:54.271859 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:53:54.271896 systemd[1]: Reached target paths.target. Oct 2 19:53:54.272876 systemd[1]: Reached target timers.target. Oct 2 19:53:54.274399 systemd[1]: Listening on dbus.socket. Oct 2 19:53:54.276568 systemd[1]: Starting docker.socket... Oct 2 19:53:54.281637 systemd[1]: Listening on sshd.socket. Oct 2 19:53:54.282801 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:53:54.283427 systemd[1]: Listening on docker.socket. Oct 2 19:53:54.284627 systemd[1]: Reached target sockets.target. Oct 2 19:53:54.285707 systemd[1]: Reached target basic.target. Oct 2 19:53:54.286748 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:53:54.286786 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:53:54.288442 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:53:54.291538 systemd[1]: Starting containerd.service... Oct 2 19:53:54.295792 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:53:54.298831 systemd[1]: Starting dbus.service... Oct 2 19:53:54.307649 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:53:54.310630 systemd[1]: Starting extend-filesystems.service... Oct 2 19:53:54.311732 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:53:54.313734 systemd[1]: Starting motdgen.service... Oct 2 19:53:54.334636 systemd[1]: Started nvidia.service. Oct 2 19:53:54.342109 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:53:54.345707 systemd[1]: Starting prepare-critools.service... Oct 2 19:53:54.349552 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:53:54.353435 systemd[1]: Starting sshd-keygen.service... Oct 2 19:53:54.358450 systemd[1]: Starting systemd-logind.service... Oct 2 19:53:54.359909 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:53:54.360045 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:53:54.361641 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:53:54.363108 systemd[1]: Starting update-engine.service... Oct 2 19:53:54.366687 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:53:54.424090 jq[1621]: false Oct 2 19:53:54.424484 jq[1631]: true Oct 2 19:53:54.425934 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:53:54.426254 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:53:54.476020 tar[1635]: crictl Oct 2 19:53:54.477167 tar[1633]: ./ Oct 2 19:53:54.477167 tar[1633]: ./loopback Oct 2 19:53:54.497871 jq[1636]: true Oct 2 19:53:54.533481 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:53:54.533699 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:53:54.634766 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:53:54.634971 systemd[1]: Finished motdgen.service. Oct 2 19:53:54.686243 extend-filesystems[1622]: Found nvme0n1 Oct 2 19:53:54.693641 extend-filesystems[1622]: Found nvme0n1p1 Oct 2 19:53:54.699412 extend-filesystems[1622]: Found nvme0n1p2 Oct 2 19:53:54.709560 dbus-daemon[1620]: [system] SELinux support is enabled Oct 2 19:53:54.709890 systemd[1]: Started dbus.service. Oct 2 19:53:54.714325 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:53:54.714363 systemd[1]: Reached target system-config.target. Oct 2 19:53:54.716162 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:53:54.716192 systemd[1]: Reached target user-config.target. Oct 2 19:53:54.722826 extend-filesystems[1622]: Found nvme0n1p3 Oct 2 19:53:54.724481 extend-filesystems[1622]: Found usr Oct 2 19:53:54.725780 extend-filesystems[1622]: Found nvme0n1p4 Oct 2 19:53:54.727435 extend-filesystems[1622]: Found nvme0n1p6 Oct 2 19:53:54.729482 extend-filesystems[1622]: Found nvme0n1p7 Oct 2 19:53:54.730865 extend-filesystems[1622]: Found nvme0n1p9 Oct 2 19:53:54.732104 extend-filesystems[1622]: Checking size of /dev/nvme0n1p9 Oct 2 19:53:54.776060 env[1634]: time="2023-10-02T19:53:54.775907598Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:53:54.784248 bash[1679]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:53:54.785812 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:53:54.802614 extend-filesystems[1622]: Resized partition /dev/nvme0n1p9 Oct 2 19:53:54.803648 dbus-daemon[1620]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.0' (uid=244 pid=1451 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:53:54.809430 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:53:54.827904 update_engine[1630]: I1002 19:53:54.826454 1630 main.cc:92] Flatcar Update Engine starting Oct 2 19:53:54.830805 extend-filesystems[1688]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:53:54.839587 systemd[1]: Started update-engine.service. Oct 2 19:53:54.845330 update_engine[1630]: I1002 19:53:54.839661 1630 update_check_scheduler.cc:74] Next update check in 7m35s Oct 2 19:53:54.843632 systemd[1]: Started locksmithd.service. Oct 2 19:53:54.848311 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:53:54.850837 amazon-ssm-agent[1617]: 2023/10/02 19:53:54 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:53:54.873705 amazon-ssm-agent[1617]: Initializing new seelog logger Oct 2 19:53:54.873879 amazon-ssm-agent[1617]: New Seelog Logger Creation Complete Oct 2 19:53:54.873959 amazon-ssm-agent[1617]: 2023/10/02 19:53:54 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:53:54.873959 amazon-ssm-agent[1617]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:53:54.874365 amazon-ssm-agent[1617]: 2023/10/02 19:53:54 processing appconfig overrides Oct 2 19:53:54.928285 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:53:54.989356 tar[1633]: ./bandwidth Oct 2 19:53:54.995442 extend-filesystems[1688]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:53:54.995442 extend-filesystems[1688]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:53:54.995442 extend-filesystems[1688]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:53:54.995018 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:53:55.003375 extend-filesystems[1622]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:53:54.995332 systemd[1]: Finished extend-filesystems.service. Oct 2 19:53:55.099740 systemd-logind[1629]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:53:55.102068 systemd-logind[1629]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 19:53:55.102384 systemd-logind[1629]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:53:55.106594 systemd-logind[1629]: New seat seat0. Oct 2 19:53:55.123553 systemd[1]: Started systemd-logind.service. Oct 2 19:53:55.153477 env[1634]: time="2023-10-02T19:53:55.153387803Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:53:55.153707 env[1634]: time="2023-10-02T19:53:55.153680387Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:55.166095 env[1634]: time="2023-10-02T19:53:55.166041244Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:53:55.166240 env[1634]: time="2023-10-02T19:53:55.166092522Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:55.166462 env[1634]: time="2023-10-02T19:53:55.166428092Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:53:55.166540 env[1634]: time="2023-10-02T19:53:55.166464611Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:55.166540 env[1634]: time="2023-10-02T19:53:55.166483824Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:53:55.166540 env[1634]: time="2023-10-02T19:53:55.166498563Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:55.166715 env[1634]: time="2023-10-02T19:53:55.166600141Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:55.166911 env[1634]: time="2023-10-02T19:53:55.166883432Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:53:55.167135 env[1634]: time="2023-10-02T19:53:55.167097952Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:53:55.167247 env[1634]: time="2023-10-02T19:53:55.167138818Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:53:55.167247 env[1634]: time="2023-10-02T19:53:55.167206817Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:53:55.167247 env[1634]: time="2023-10-02T19:53:55.167225660Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185664658Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185720072Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185741348Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185794390Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185815341Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185836357Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185857781Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185877782Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185896529Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185918276Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185941343Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.185961655Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.186124120Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:53:55.186432 env[1634]: time="2023-10-02T19:53:55.186227728Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:53:55.187755 env[1634]: time="2023-10-02T19:53:55.187560394Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:53:55.187755 env[1634]: time="2023-10-02T19:53:55.187608734Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.187755 env[1634]: time="2023-10-02T19:53:55.187628963Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:53:55.188002 env[1634]: time="2023-10-02T19:53:55.187904313Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.188058 env[1634]: time="2023-10-02T19:53:55.187930243Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.188140 env[1634]: time="2023-10-02T19:53:55.188122392Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.188215 env[1634]: time="2023-10-02T19:53:55.188200929Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188289515Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188383635Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188403827Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188422924Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188446855Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188608398Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188630838Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188654331Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188672455Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188694457Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188711413Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188738449Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:53:55.189286 env[1634]: time="2023-10-02T19:53:55.188780386Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:53:55.189804 env[1634]: time="2023-10-02T19:53:55.189096188Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:53:55.189804 env[1634]: time="2023-10-02T19:53:55.189177740Z" level=info msg="Connect containerd service" Oct 2 19:53:55.189804 env[1634]: time="2023-10-02T19:53:55.189217855Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:53:55.194228 env[1634]: time="2023-10-02T19:53:55.194184666Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:53:55.195847 env[1634]: time="2023-10-02T19:53:55.195817688Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:53:55.197424 env[1634]: time="2023-10-02T19:53:55.197399043Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:53:55.198693 systemd[1]: Started containerd.service. Oct 2 19:53:55.201713 env[1634]: time="2023-10-02T19:53:55.201582697Z" level=info msg="containerd successfully booted in 0.438199s" Oct 2 19:53:55.207541 env[1634]: time="2023-10-02T19:53:55.207470394Z" level=info msg="Start subscribing containerd event" Oct 2 19:53:55.215411 env[1634]: time="2023-10-02T19:53:55.215352014Z" level=info msg="Start recovering state" Oct 2 19:53:55.215672 env[1634]: time="2023-10-02T19:53:55.215656975Z" level=info msg="Start event monitor" Oct 2 19:53:55.215775 env[1634]: time="2023-10-02T19:53:55.215759521Z" level=info msg="Start snapshots syncer" Oct 2 19:53:55.215978 env[1634]: time="2023-10-02T19:53:55.215959165Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:53:55.216084 env[1634]: time="2023-10-02T19:53:55.216071231Z" level=info msg="Start streaming server" Oct 2 19:53:55.218760 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:53:55.249649 tar[1633]: ./ptp Oct 2 19:53:55.254428 dbus-daemon[1620]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:53:55.254610 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:53:55.257591 dbus-daemon[1620]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1687 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:53:55.262862 systemd[1]: Starting polkit.service... Oct 2 19:53:55.312920 polkitd[1724]: Started polkitd version 121 Oct 2 19:53:55.336773 polkitd[1724]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:53:55.349520 polkitd[1724]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:53:55.358434 polkitd[1724]: Finished loading, compiling and executing 2 rules Oct 2 19:53:55.359595 dbus-daemon[1620]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:53:55.359801 systemd[1]: Started polkit.service. Oct 2 19:53:55.363474 polkitd[1724]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:53:55.377023 systemd-hostnamed[1687]: Hostname set to (transient) Oct 2 19:53:55.377146 systemd-resolved[1587]: System hostname changed to 'ip-172-31-26-217'. Oct 2 19:53:55.502839 tar[1633]: ./vlan Oct 2 19:53:55.575818 coreos-metadata[1619]: Oct 02 19:53:55.575 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:53:55.592867 coreos-metadata[1619]: Oct 02 19:53:55.592 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:53:55.593702 coreos-metadata[1619]: Oct 02 19:53:55.593 INFO Fetch successful Oct 2 19:53:55.593702 coreos-metadata[1619]: Oct 02 19:53:55.593 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:53:55.594719 coreos-metadata[1619]: Oct 02 19:53:55.594 INFO Fetch successful Oct 2 19:53:55.599392 unknown[1619]: wrote ssh authorized keys file for user: core Oct 2 19:53:55.623176 update-ssh-keys[1786]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:53:55.623661 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:53:55.679731 tar[1633]: ./host-device Oct 2 19:53:55.737963 amazon-ssm-agent[1617]: 2023-10-02 19:53:55 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-097e840664504e451 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-097e840664504e451 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:53:55.737963 amazon-ssm-agent[1617]: status code: 400, request id: dec1785a-9c74-4a81-acc2-2b7e3ec4bdcf Oct 2 19:53:55.737963 amazon-ssm-agent[1617]: 2023-10-02 19:53:55 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:53:55.815492 tar[1633]: ./tuning Oct 2 19:53:55.986194 tar[1633]: ./vrf Oct 2 19:53:56.120395 tar[1633]: ./sbr Oct 2 19:53:56.227852 tar[1633]: ./tap Oct 2 19:53:56.352514 tar[1633]: ./dhcp Oct 2 19:53:56.563425 systemd[1]: Finished prepare-critools.service. Oct 2 19:53:56.604387 tar[1633]: ./static Oct 2 19:53:56.645723 tar[1633]: ./firewall Oct 2 19:53:56.716905 tar[1633]: ./macvlan Oct 2 19:53:56.769909 tar[1633]: ./dummy Oct 2 19:53:56.826251 tar[1633]: ./bridge Oct 2 19:53:56.884592 tar[1633]: ./ipvlan Oct 2 19:53:56.948239 tar[1633]: ./portmap Oct 2 19:53:57.006069 tar[1633]: ./host-local Oct 2 19:53:57.086192 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:53:57.175423 locksmithd[1689]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:53:57.313551 sshd_keygen[1652]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:53:57.340470 systemd[1]: Finished sshd-keygen.service. Oct 2 19:53:57.344121 systemd[1]: Starting issuegen.service... Oct 2 19:53:57.350677 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:53:57.350925 systemd[1]: Finished issuegen.service. Oct 2 19:53:57.353606 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:53:57.366060 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:53:57.370419 systemd[1]: Started getty@tty1.service. Oct 2 19:53:57.375556 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:53:57.377417 systemd[1]: Reached target getty.target. Oct 2 19:53:57.378933 systemd[1]: Reached target multi-user.target. Oct 2 19:53:57.382747 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:53:57.396080 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:53:57.396248 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:53:57.398319 systemd[1]: Startup finished in 923ms (kernel) + 11.065s (initrd) + 12.799s (userspace) = 24.789s. Oct 2 19:54:02.812075 systemd[1]: Created slice system-sshd.slice. Oct 2 19:54:02.813988 systemd[1]: Started sshd@0-172.31.26.217:22-139.178.89.65:41260.service. Oct 2 19:54:03.046738 sshd[1828]: Accepted publickey for core from 139.178.89.65 port 41260 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:03.050895 sshd[1828]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:03.076444 systemd[1]: Created slice user-500.slice. Oct 2 19:54:03.081226 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:54:03.087876 systemd-logind[1629]: New session 1 of user core. Oct 2 19:54:03.099470 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:54:03.102852 systemd[1]: Starting user@500.service... Oct 2 19:54:03.108615 (systemd)[1831]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:03.306059 systemd[1831]: Queued start job for default target default.target. Oct 2 19:54:03.307962 systemd[1831]: Reached target paths.target. Oct 2 19:54:03.308045 systemd[1831]: Reached target sockets.target. Oct 2 19:54:03.308068 systemd[1831]: Reached target timers.target. Oct 2 19:54:03.308084 systemd[1831]: Reached target basic.target. Oct 2 19:54:03.308146 systemd[1831]: Reached target default.target. Oct 2 19:54:03.308186 systemd[1831]: Startup finished in 191ms. Oct 2 19:54:03.313714 systemd[1]: Started user@500.service. Oct 2 19:54:03.324379 systemd[1]: Started session-1.scope. Oct 2 19:54:03.520455 systemd[1]: Started sshd@1-172.31.26.217:22-139.178.89.65:41262.service. Oct 2 19:54:03.697797 sshd[1840]: Accepted publickey for core from 139.178.89.65 port 41262 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:03.699974 sshd[1840]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:03.707275 systemd[1]: Started session-2.scope. Oct 2 19:54:03.707943 systemd-logind[1629]: New session 2 of user core. Oct 2 19:54:03.843029 sshd[1840]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:03.846493 systemd[1]: sshd@1-172.31.26.217:22-139.178.89.65:41262.service: Deactivated successfully. Oct 2 19:54:03.853669 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:54:03.858118 systemd-logind[1629]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:54:03.859835 systemd-logind[1629]: Removed session 2. Oct 2 19:54:03.870617 systemd[1]: Started sshd@2-172.31.26.217:22-139.178.89.65:41272.service. Oct 2 19:54:04.057741 sshd[1846]: Accepted publickey for core from 139.178.89.65 port 41272 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:04.059404 sshd[1846]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:04.070682 systemd[1]: Started session-3.scope. Oct 2 19:54:04.071178 systemd-logind[1629]: New session 3 of user core. Oct 2 19:54:04.192327 sshd[1846]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:04.198290 systemd[1]: sshd@2-172.31.26.217:22-139.178.89.65:41272.service: Deactivated successfully. Oct 2 19:54:04.202325 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:54:04.204037 systemd-logind[1629]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:54:04.207670 systemd-logind[1629]: Removed session 3. Oct 2 19:54:04.219144 systemd[1]: Started sshd@3-172.31.26.217:22-139.178.89.65:41286.service. Oct 2 19:54:04.388765 sshd[1852]: Accepted publickey for core from 139.178.89.65 port 41286 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:04.390494 sshd[1852]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:04.396761 systemd[1]: Started session-4.scope. Oct 2 19:54:04.397713 systemd-logind[1629]: New session 4 of user core. Oct 2 19:54:04.526013 sshd[1852]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:04.530359 systemd[1]: sshd@3-172.31.26.217:22-139.178.89.65:41286.service: Deactivated successfully. Oct 2 19:54:04.531650 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:54:04.533241 systemd-logind[1629]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:54:04.534492 systemd-logind[1629]: Removed session 4. Oct 2 19:54:04.555979 systemd[1]: Started sshd@4-172.31.26.217:22-139.178.89.65:41290.service. Oct 2 19:54:04.731972 sshd[1858]: Accepted publickey for core from 139.178.89.65 port 41290 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:04.733610 sshd[1858]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:04.741650 systemd-logind[1629]: New session 5 of user core. Oct 2 19:54:04.741909 systemd[1]: Started session-5.scope. Oct 2 19:54:04.867444 sudo[1861]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:54:04.868348 sudo[1861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:04.877514 dbus-daemon[1620]: н\xd5<\u0003V: received setenforce notice (enforcing=-115594400) Oct 2 19:54:04.879734 sudo[1861]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:04.905650 sshd[1858]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:04.909928 systemd[1]: sshd@4-172.31.26.217:22-139.178.89.65:41290.service: Deactivated successfully. Oct 2 19:54:04.911512 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:54:04.912660 systemd-logind[1629]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:54:04.913870 systemd-logind[1629]: Removed session 5. Oct 2 19:54:04.931078 systemd[1]: Started sshd@5-172.31.26.217:22-139.178.89.65:41302.service. Oct 2 19:54:05.105026 sshd[1865]: Accepted publickey for core from 139.178.89.65 port 41302 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:05.107533 sshd[1865]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:05.125476 systemd-logind[1629]: New session 6 of user core. Oct 2 19:54:05.126060 systemd[1]: Started session-6.scope. Oct 2 19:54:05.252702 sudo[1869]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:54:05.253094 sudo[1869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:05.256338 sudo[1869]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:05.262692 sudo[1868]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:54:05.262982 sudo[1868]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:05.275631 systemd[1]: Stopping audit-rules.service... Oct 2 19:54:05.276000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:05.278875 kernel: kauditd_printk_skb: 182 callbacks suppressed Oct 2 19:54:05.278956 kernel: audit: type=1305 audit(1696276445.276:162): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:54:05.278986 auditctl[1872]: No rules Oct 2 19:54:05.279845 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:54:05.280053 systemd[1]: Stopped audit-rules.service. Oct 2 19:54:05.283174 systemd[1]: Starting audit-rules.service... Oct 2 19:54:05.276000 audit[1872]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffe78d7ec0 a2=420 a3=0 items=0 ppid=1 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:05.292307 kernel: audit: type=1300 audit(1696276445.276:162): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffe78d7ec0 a2=420 a3=0 items=0 ppid=1 pid=1872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:05.276000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:05.301273 kernel: audit: type=1327 audit(1696276445.276:162): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:54:05.301385 kernel: audit: type=1131 audit(1696276445.278:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.322539 augenrules[1889]: No rules Oct 2 19:54:05.323660 systemd[1]: Finished audit-rules.service. Oct 2 19:54:05.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.325104 sudo[1868]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:05.323000 audit[1868]: USER_END pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.337772 kernel: audit: type=1130 audit(1696276445.322:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.337884 kernel: audit: type=1106 audit(1696276445.323:165): pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.337916 kernel: audit: type=1104 audit(1696276445.324:166): pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.324000 audit[1868]: CRED_DISP pid=1868 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.348118 sshd[1865]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:05.353122 systemd[1]: sshd@5-172.31.26.217:22-139.178.89.65:41302.service: Deactivated successfully. Oct 2 19:54:05.354136 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:54:05.348000 audit[1865]: USER_END pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.356929 systemd-logind[1629]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:54:05.360012 systemd-logind[1629]: Removed session 6. Oct 2 19:54:05.384901 kernel: audit: type=1106 audit(1696276445.348:167): pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.385037 kernel: audit: type=1104 audit(1696276445.349:168): pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.349000 audit[1865]: CRED_DISP pid=1865 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.352000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.26.217:22-139.178.89.65:41302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.393833 systemd[1]: Started sshd@6-172.31.26.217:22-139.178.89.65:41318.service. Oct 2 19:54:05.395138 kernel: audit: type=1131 audit(1696276445.352:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.26.217:22-139.178.89.65:41302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.217:22-139.178.89.65:41318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.567000 audit[1895]: USER_ACCT pid=1895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.568612 sshd[1895]: Accepted publickey for core from 139.178.89.65 port 41318 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:54:05.568000 audit[1895]: CRED_ACQ pid=1895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.568000 audit[1895]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9203e240 a2=3 a3=0 items=0 ppid=1 pid=1895 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:05.568000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:54:05.570186 sshd[1895]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:54:05.577628 systemd[1]: Started session-7.scope. Oct 2 19:54:05.578542 systemd-logind[1629]: New session 7 of user core. Oct 2 19:54:05.584000 audit[1895]: USER_START pid=1895 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.587000 audit[1897]: CRED_ACQ pid=1897 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:05.685000 audit[1898]: USER_ACCT pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.686873 sudo[1898]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:54:05.685000 audit[1898]: CRED_REFR pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:05.687694 sudo[1898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:54:05.690000 audit[1898]: USER_START pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:06.272294 systemd[1]: Starting docker.service... Oct 2 19:54:06.317989 env[1913]: time="2023-10-02T19:54:06.317932308Z" level=info msg="Starting up" Oct 2 19:54:06.319603 env[1913]: time="2023-10-02T19:54:06.319563646Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:06.319603 env[1913]: time="2023-10-02T19:54:06.319585930Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:06.319763 env[1913]: time="2023-10-02T19:54:06.319609377Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:54:06.319763 env[1913]: time="2023-10-02T19:54:06.319623399Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:06.321804 env[1913]: time="2023-10-02T19:54:06.321769421Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:54:06.321804 env[1913]: time="2023-10-02T19:54:06.321790619Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:54:06.322007 env[1913]: time="2023-10-02T19:54:06.321816625Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:54:06.322007 env[1913]: time="2023-10-02T19:54:06.321833004Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:54:06.330429 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2378777487-merged.mount: Deactivated successfully. Oct 2 19:54:06.380121 env[1913]: time="2023-10-02T19:54:06.380070228Z" level=info msg="Loading containers: start." Oct 2 19:54:06.488000 audit[1943]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.488000 audit[1943]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc0f167aa0 a2=0 a3=7ffc0f167a8c items=0 ppid=1913 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.488000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:54:06.491000 audit[1945]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.491000 audit[1945]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe70f1ec50 a2=0 a3=7ffe70f1ec3c items=0 ppid=1913 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.491000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:54:06.493000 audit[1947]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.493000 audit[1947]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcba4aeb10 a2=0 a3=7ffcba4aeafc items=0 ppid=1913 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.493000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:06.495000 audit[1949]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1949 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.495000 audit[1949]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe0c69c900 a2=0 a3=7ffe0c69c8ec items=0 ppid=1913 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.495000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:06.498000 audit[1952]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.498000 audit[1952]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffe95f4350 a2=0 a3=7fffe95f433c items=0 ppid=1913 pid=1952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.498000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:54:06.518000 audit[1957]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.518000 audit[1957]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2db6e5f0 a2=0 a3=7fff2db6e5dc items=0 ppid=1913 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.518000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:54:06.528000 audit[1959]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.528000 audit[1959]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff000f5580 a2=0 a3=7fff000f556c items=0 ppid=1913 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.528000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:54:06.531000 audit[1961]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.531000 audit[1961]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffdf39840f0 a2=0 a3=7ffdf39840dc items=0 ppid=1913 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.531000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:54:06.534000 audit[1963]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.534000 audit[1963]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd6f08c820 a2=0 a3=7ffd6f08c80c items=0 ppid=1913 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.534000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:06.546000 audit[1967]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.546000 audit[1967]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff9e391990 a2=0 a3=7fff9e39197c items=0 ppid=1913 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.546000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:06.547000 audit[1968]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.547000 audit[1968]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff2305c1d0 a2=0 a3=7fff2305c1bc items=0 ppid=1913 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.547000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:06.559290 kernel: Initializing XFRM netlink socket Oct 2 19:54:06.613096 env[1913]: time="2023-10-02T19:54:06.613051779Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:54:06.614446 (udev-worker)[1923]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:54:06.685000 audit[1976]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.685000 audit[1976]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd0e62e740 a2=0 a3=7ffd0e62e72c items=0 ppid=1913 pid=1976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.685000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:54:06.749000 audit[1979]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1979 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.749000 audit[1979]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffcdd00a5d0 a2=0 a3=7ffcdd00a5bc items=0 ppid=1913 pid=1979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.749000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:54:06.753000 audit[1982]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.753000 audit[1982]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff9b603170 a2=0 a3=7fff9b60315c items=0 ppid=1913 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.753000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:06.755000 audit[1984]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.755000 audit[1984]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd61b3aad0 a2=0 a3=7ffd61b3aabc items=0 ppid=1913 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.755000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:54:06.758000 audit[1986]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.758000 audit[1986]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff59975660 a2=0 a3=7fff5997564c items=0 ppid=1913 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.758000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:54:06.760000 audit[1988]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.760000 audit[1988]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fffef67ba90 a2=0 a3=7fffef67ba7c items=0 ppid=1913 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.760000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:54:06.763000 audit[1990]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1990 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.763000 audit[1990]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffce6132380 a2=0 a3=7ffce613236c items=0 ppid=1913 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.763000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:54:06.774000 audit[1993]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.774000 audit[1993]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffdf7baa250 a2=0 a3=7ffdf7baa23c items=0 ppid=1913 pid=1993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.774000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:54:06.778000 audit[1995]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.778000 audit[1995]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff38fc8e30 a2=0 a3=7fff38fc8e1c items=0 ppid=1913 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.778000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:54:06.781000 audit[1997]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.781000 audit[1997]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffe49c32060 a2=0 a3=7ffe49c3204c items=0 ppid=1913 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.781000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:54:06.784000 audit[1999]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.784000 audit[1999]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffda93a10f0 a2=0 a3=7ffda93a10dc items=0 ppid=1913 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.784000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:54:06.786127 systemd-networkd[1451]: docker0: Link UP Oct 2 19:54:06.797000 audit[2003]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.797000 audit[2003]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb02f2c70 a2=0 a3=7fffb02f2c5c items=0 ppid=1913 pid=2003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.797000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:06.798000 audit[2004]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:06.798000 audit[2004]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd38d47bf0 a2=0 a3=7ffd38d47bdc items=0 ppid=1913 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:06.798000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:54:06.800742 env[1913]: time="2023-10-02T19:54:06.800641836Z" level=info msg="Loading containers: done." Oct 2 19:54:06.841108 env[1913]: time="2023-10-02T19:54:06.841062486Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:54:06.841481 env[1913]: time="2023-10-02T19:54:06.841366775Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:54:06.841618 env[1913]: time="2023-10-02T19:54:06.841593375Z" level=info msg="Daemon has completed initialization" Oct 2 19:54:06.887649 systemd[1]: Started docker.service. Oct 2 19:54:06.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:06.902285 env[1913]: time="2023-10-02T19:54:06.901931065Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:54:06.928565 systemd[1]: Reloading. Oct 2 19:54:07.053013 /usr/lib/systemd/system-generators/torcx-generator[2052]: time="2023-10-02T19:54:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:07.053058 /usr/lib/systemd/system-generators/torcx-generator[2052]: time="2023-10-02T19:54:07Z" level=info msg="torcx already run" Oct 2 19:54:07.178829 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:07.178853 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:07.207471 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.359000 audit: BPF prog-id=37 op=LOAD Oct 2 19:54:07.359000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit: BPF prog-id=38 op=LOAD Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.360000 audit: BPF prog-id=39 op=LOAD Oct 2 19:54:07.360000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:54:07.360000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit: BPF prog-id=40 op=LOAD Oct 2 19:54:07.362000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit: BPF prog-id=41 op=LOAD Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.362000 audit: BPF prog-id=42 op=LOAD Oct 2 19:54:07.362000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:54:07.362000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit: BPF prog-id=43 op=LOAD Oct 2 19:54:07.367000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit: BPF prog-id=44 op=LOAD Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.367000 audit: BPF prog-id=45 op=LOAD Oct 2 19:54:07.368000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:54:07.368000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.369000 audit: BPF prog-id=46 op=LOAD Oct 2 19:54:07.369000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit: BPF prog-id=47 op=LOAD Oct 2 19:54:07.372000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit: BPF prog-id=48 op=LOAD Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.372000 audit: BPF prog-id=49 op=LOAD Oct 2 19:54:07.372000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:54:07.372000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit: BPF prog-id=50 op=LOAD Oct 2 19:54:07.373000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit: BPF prog-id=51 op=LOAD Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.373000 audit: BPF prog-id=52 op=LOAD Oct 2 19:54:07.373000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:54:07.373000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.375000 audit: BPF prog-id=53 op=LOAD Oct 2 19:54:07.375000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:07.376000 audit: BPF prog-id=54 op=LOAD Oct 2 19:54:07.376000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:54:07.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:07.395706 systemd[1]: Started kubelet.service. Oct 2 19:54:07.509304 kubelet[2101]: E1002 19:54:07.508794 2101 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:54:07.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:07.513026 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:07.513191 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:08.094445 env[1634]: time="2023-10-02T19:54:08.094393806Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:54:08.727371 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1198771504.mount: Deactivated successfully. Oct 2 19:54:12.765478 env[1634]: time="2023-10-02T19:54:12.765420532Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:12.769200 env[1634]: time="2023-10-02T19:54:12.769039487Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:12.771275 env[1634]: time="2023-10-02T19:54:12.771226932Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:12.773757 env[1634]: time="2023-10-02T19:54:12.773722159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:12.774622 env[1634]: time="2023-10-02T19:54:12.774591766Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:54:12.786663 env[1634]: time="2023-10-02T19:54:12.786623394Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:54:17.314576 env[1634]: time="2023-10-02T19:54:17.314516242Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:17.339061 env[1634]: time="2023-10-02T19:54:17.338728385Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:17.341637 env[1634]: time="2023-10-02T19:54:17.341593544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:17.343876 env[1634]: time="2023-10-02T19:54:17.343837263Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:17.344626 env[1634]: time="2023-10-02T19:54:17.344587935Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:54:17.356781 env[1634]: time="2023-10-02T19:54:17.356734029Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:54:17.664692 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:54:17.671954 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:54:17.672100 kernel: audit: type=1130 audit(1696276457.663:412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:17.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:17.673056 kernel: audit: type=1131 audit(1696276457.663:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:17.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:17.664963 systemd[1]: Stopped kubelet.service. Oct 2 19:54:17.666835 systemd[1]: Started kubelet.service. Oct 2 19:54:17.683203 kernel: audit: type=1130 audit(1696276457.665:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:17.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:17.729971 kubelet[2133]: E1002 19:54:17.729922 2133 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:54:17.733662 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:17.733831 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:17.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:17.739288 kernel: audit: type=1131 audit(1696276457.732:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:19.597009 env[1634]: time="2023-10-02T19:54:19.596948555Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:19.623299 env[1634]: time="2023-10-02T19:54:19.623229359Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:19.636559 env[1634]: time="2023-10-02T19:54:19.636507643Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:19.640827 env[1634]: time="2023-10-02T19:54:19.640768256Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:19.642578 env[1634]: time="2023-10-02T19:54:19.642531457Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:54:19.655572 env[1634]: time="2023-10-02T19:54:19.655530653Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:54:21.357436 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2970905622.mount: Deactivated successfully. Oct 2 19:54:22.214051 env[1634]: time="2023-10-02T19:54:22.213991615Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.217343 env[1634]: time="2023-10-02T19:54:22.217298061Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.219784 env[1634]: time="2023-10-02T19:54:22.219740331Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.222631 env[1634]: time="2023-10-02T19:54:22.222588520Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.223007 env[1634]: time="2023-10-02T19:54:22.222969205Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:54:22.238037 env[1634]: time="2023-10-02T19:54:22.237990300Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:54:22.754045 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4222007255.mount: Deactivated successfully. Oct 2 19:54:22.764193 env[1634]: time="2023-10-02T19:54:22.764113321Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.767599 env[1634]: time="2023-10-02T19:54:22.767466710Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.770626 env[1634]: time="2023-10-02T19:54:22.770584123Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.772788 env[1634]: time="2023-10-02T19:54:22.772749437Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:22.773278 env[1634]: time="2023-10-02T19:54:22.773227156Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:54:22.786989 env[1634]: time="2023-10-02T19:54:22.786942791Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:54:23.680158 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3357208320.mount: Deactivated successfully. Oct 2 19:54:25.409334 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:54:25.408000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:25.420356 kernel: audit: type=1131 audit(1696276465.408:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:25.441000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:54:25.441000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:54:25.447099 kernel: audit: type=1334 audit(1696276465.441:417): prog-id=42 op=UNLOAD Oct 2 19:54:25.447216 kernel: audit: type=1334 audit(1696276465.441:418): prog-id=41 op=UNLOAD Oct 2 19:54:25.447273 kernel: audit: type=1334 audit(1696276465.441:419): prog-id=40 op=UNLOAD Oct 2 19:54:25.441000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:54:27.943981 kernel: audit: type=1130 audit(1696276467.914:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:27.944176 kernel: audit: type=1131 audit(1696276467.914:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:27.944216 kernel: audit: type=1130 audit(1696276467.925:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:27.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:27.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:27.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:27.914763 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:54:27.915413 systemd[1]: Stopped kubelet.service. Oct 2 19:54:27.926700 systemd[1]: Started kubelet.service. Oct 2 19:54:28.084589 kubelet[2157]: E1002 19:54:28.084526 2157 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:54:28.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:28.087375 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:54:28.087545 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:54:28.095344 kernel: audit: type=1131 audit(1696276468.086:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:54:30.086545 env[1634]: time="2023-10-02T19:54:30.086405852Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:30.090744 env[1634]: time="2023-10-02T19:54:30.090696865Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:30.093608 env[1634]: time="2023-10-02T19:54:30.093563644Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:30.101194 env[1634]: time="2023-10-02T19:54:30.101146598Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:30.102179 env[1634]: time="2023-10-02T19:54:30.102124845Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:54:30.126412 env[1634]: time="2023-10-02T19:54:30.126279724Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:54:30.740382 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2066192356.mount: Deactivated successfully. Oct 2 19:54:31.893554 env[1634]: time="2023-10-02T19:54:31.893357514Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:31.896798 env[1634]: time="2023-10-02T19:54:31.896750761Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:31.899208 env[1634]: time="2023-10-02T19:54:31.899165371Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:31.901540 env[1634]: time="2023-10-02T19:54:31.901497217Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:31.902239 env[1634]: time="2023-10-02T19:54:31.902141416Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:54:34.238312 systemd[1]: Stopped kubelet.service. Oct 2 19:54:34.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:34.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:34.249339 kernel: audit: type=1130 audit(1696276474.237:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:34.249463 kernel: audit: type=1131 audit(1696276474.237:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:34.262166 systemd[1]: Reloading. Oct 2 19:54:34.412182 /usr/lib/systemd/system-generators/torcx-generator[2255]: time="2023-10-02T19:54:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:34.413225 /usr/lib/systemd/system-generators/torcx-generator[2255]: time="2023-10-02T19:54:34Z" level=info msg="torcx already run" Oct 2 19:54:34.552728 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:34.552750 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:34.586000 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:34.711285 kernel: audit: type=1400 audit(1696276474.705:426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.711428 kernel: audit: type=1400 audit(1696276474.705:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.705000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.723844 kernel: audit: type=1400 audit(1696276474.710:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.723994 kernel: audit: type=1400 audit(1696276474.710:429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.735794 kernel: audit: type=1400 audit(1696276474.710:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.735915 kernel: audit: type=1400 audit(1696276474.710:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.747206 kernel: audit: type=1400 audit(1696276474.710:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.747504 kernel: audit: type=1400 audit(1696276474.710:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.710000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.710000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.728000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.728000 audit: BPF prog-id=55 op=LOAD Oct 2 19:54:34.728000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.740000 audit: BPF prog-id=56 op=LOAD Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.752000 audit: BPF prog-id=57 op=LOAD Oct 2 19:54:34.752000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:54:34.752000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit: BPF prog-id=58 op=LOAD Oct 2 19:54:34.757000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit: BPF prog-id=59 op=LOAD Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.758000 audit: BPF prog-id=60 op=LOAD Oct 2 19:54:34.758000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:54:34.758000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.761000 audit: BPF prog-id=61 op=LOAD Oct 2 19:54:34.761000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit: BPF prog-id=62 op=LOAD Oct 2 19:54:34.764000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit: BPF prog-id=63 op=LOAD Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.764000 audit: BPF prog-id=64 op=LOAD Oct 2 19:54:34.764000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:54:34.764000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit: BPF prog-id=65 op=LOAD Oct 2 19:54:34.765000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit: BPF prog-id=66 op=LOAD Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.766000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.766000 audit: BPF prog-id=67 op=LOAD Oct 2 19:54:34.766000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:54:34.766000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:54:34.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.768000 audit: BPF prog-id=68 op=LOAD Oct 2 19:54:34.768000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:34.769000 audit: BPF prog-id=69 op=LOAD Oct 2 19:54:34.769000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:54:34.807811 systemd[1]: Started kubelet.service. Oct 2 19:54:34.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:34.890998 kubelet[2307]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:34.890998 kubelet[2307]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:54:34.890998 kubelet[2307]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:34.891641 kubelet[2307]: I1002 19:54:34.891064 2307 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:54:35.827868 kubelet[2307]: I1002 19:54:35.827825 2307 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:54:35.827868 kubelet[2307]: I1002 19:54:35.827859 2307 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:54:35.828455 kubelet[2307]: I1002 19:54:35.828430 2307 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:54:35.836112 kubelet[2307]: E1002 19:54:35.836059 2307 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.26.217:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.836471 kubelet[2307]: I1002 19:54:35.836450 2307 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:54:35.838252 kubelet[2307]: I1002 19:54:35.838229 2307 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:54:35.838645 kubelet[2307]: I1002 19:54:35.838626 2307 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:54:35.838735 kubelet[2307]: I1002 19:54:35.838717 2307 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:54:35.838887 kubelet[2307]: I1002 19:54:35.838747 2307 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:54:35.838887 kubelet[2307]: I1002 19:54:35.838763 2307 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:54:35.838887 kubelet[2307]: I1002 19:54:35.838881 2307 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:35.844878 kubelet[2307]: I1002 19:54:35.844818 2307 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:54:35.844878 kubelet[2307]: I1002 19:54:35.844874 2307 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:54:35.845196 kubelet[2307]: I1002 19:54:35.844898 2307 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:54:35.845196 kubelet[2307]: I1002 19:54:35.844939 2307 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:54:35.848103 kubelet[2307]: I1002 19:54:35.848080 2307 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:54:35.848706 kubelet[2307]: W1002 19:54:35.848691 2307 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:54:35.849558 kubelet[2307]: I1002 19:54:35.849545 2307 server.go:1168] "Started kubelet" Oct 2 19:54:35.850115 kubelet[2307]: W1002 19:54:35.850056 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.26.217:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-217&limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.850254 kubelet[2307]: E1002 19:54:35.850241 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.26.217:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-217&limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.853000 audit[2307]: AVC avc: denied { mac_admin } for pid=2307 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:35.853000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:35.853000 audit[2307]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008fdd40 a1=c0008f2d38 a2=c0008fdd10 a3=25 items=0 ppid=1 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.853000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:35.853000 audit[2307]: AVC avc: denied { mac_admin } for pid=2307 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:35.853000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:35.853000 audit[2307]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008dade0 a1=c0008f2d50 a2=c0008fddd0 a3=25 items=0 ppid=1 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.853000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:35.854793 kubelet[2307]: I1002 19:54:35.853972 2307 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:54:35.854793 kubelet[2307]: I1002 19:54:35.854024 2307 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:54:35.854793 kubelet[2307]: I1002 19:54:35.854414 2307 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:54:35.855298 kubelet[2307]: E1002 19:54:35.855193 2307 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-26-217.178a6277afdcaaf6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-26-217", UID:"ip-172-31-26-217", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-26-217"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 35, 849517814, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 35, 849517814, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.26.217:6443/api/v1/namespaces/default/events": dial tcp 172.31.26.217:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:54:35.855690 kubelet[2307]: W1002 19:54:35.855647 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.26.217:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.855861 kubelet[2307]: E1002 19:54:35.855849 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.26.217:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.856223 kubelet[2307]: E1002 19:54:35.856202 2307 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:54:35.856315 kubelet[2307]: E1002 19:54:35.856229 2307 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:54:35.858853 kubelet[2307]: I1002 19:54:35.858830 2307 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:54:35.860049 kubelet[2307]: I1002 19:54:35.859995 2307 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:54:35.862798 kubelet[2307]: I1002 19:54:35.862766 2307 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:54:35.867334 kubelet[2307]: I1002 19:54:35.864336 2307 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:54:35.867334 kubelet[2307]: I1002 19:54:35.864446 2307 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:54:35.867334 kubelet[2307]: W1002 19:54:35.864898 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.26.217:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.867334 kubelet[2307]: E1002 19:54:35.864950 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.26.217:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.867334 kubelet[2307]: E1002 19:54:35.866281 2307 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.217:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-217?timeout=10s\": dial tcp 172.31.26.217:6443: connect: connection refused" interval="200ms" Oct 2 19:54:35.868000 audit[2318]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.868000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdeb3b0de0 a2=0 a3=7ffdeb3b0dcc items=0 ppid=2307 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.868000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:54:35.870000 audit[2319]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.870000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe563ef440 a2=0 a3=7ffe563ef42c items=0 ppid=2307 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.870000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:54:35.879000 audit[2321]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.879000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffddd8e2970 a2=0 a3=7ffddd8e295c items=0 ppid=2307 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:35.893000 audit[2323]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.893000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffef8d783a0 a2=0 a3=7ffef8d7838c items=0 ppid=2307 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.893000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:54:35.934000 audit[2330]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.934000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcad91f550 a2=0 a3=7ffcad91f53c items=0 ppid=2307 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.934000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:54:35.936122 kubelet[2307]: I1002 19:54:35.936097 2307 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:54:35.938000 audit[2332]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:35.938000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd2189de30 a2=0 a3=7ffd2189de1c items=0 ppid=2307 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.938000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:54:35.939461 kubelet[2307]: I1002 19:54:35.939439 2307 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:54:35.939555 kubelet[2307]: I1002 19:54:35.939472 2307 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:54:35.939555 kubelet[2307]: I1002 19:54:35.939507 2307 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:54:35.939641 kubelet[2307]: E1002 19:54:35.939576 2307 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:54:35.940316 kubelet[2307]: W1002 19:54:35.940291 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.26.217:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.940406 kubelet[2307]: E1002 19:54:35.940329 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.26.217:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:35.943000 audit[2333]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:35.943000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffab3b5640 a2=0 a3=7fffab3b562c items=0 ppid=2307 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.943000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:54:35.945531 kubelet[2307]: I1002 19:54:35.945511 2307 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:54:35.945531 kubelet[2307]: I1002 19:54:35.945532 2307 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:54:35.945679 kubelet[2307]: I1002 19:54:35.945548 2307 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:35.946000 audit[2335]: NETFILTER_CFG table=nat:33 family=10 entries=2 op=nft_register_chain pid=2335 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:35.946000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff3c1d4d70 a2=0 a3=7fff3c1d4d5c items=0 ppid=2307 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.946000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:54:35.946000 audit[2334]: NETFILTER_CFG table=mangle:34 family=2 entries=1 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.946000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd306e3e0 a2=0 a3=7ffdd306e3cc items=0 ppid=2307 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.946000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:54:35.947000 audit[2336]: NETFILTER_CFG table=filter:35 family=10 entries=2 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:54:35.947000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffcb5681d0 a2=0 a3=7fffcb5681bc items=0 ppid=2307 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.947000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:54:35.948680 kubelet[2307]: I1002 19:54:35.948608 2307 policy_none.go:49] "None policy: Start" Oct 2 19:54:35.950000 audit[2337]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.950000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2b43dbb0 a2=0 a3=7ffe2b43db9c items=0 ppid=2307 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.950000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:54:35.951114 kubelet[2307]: I1002 19:54:35.951095 2307 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:54:35.951228 kubelet[2307]: I1002 19:54:35.951218 2307 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:54:35.952000 audit[2338]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:54:35.952000 audit[2338]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffccfd23ae0 a2=0 a3=7ffccfd23acc items=0 ppid=2307 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.952000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:54:35.960424 systemd[1]: Created slice kubepods.slice. Oct 2 19:54:35.965631 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:54:35.969326 kubelet[2307]: I1002 19:54:35.969302 2307 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-217" Oct 2 19:54:35.969785 kubelet[2307]: E1002 19:54:35.969767 2307 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.217:6443/api/v1/nodes\": dial tcp 172.31.26.217:6443: connect: connection refused" node="ip-172-31-26-217" Oct 2 19:54:35.975754 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:54:35.977953 kubelet[2307]: I1002 19:54:35.977933 2307 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:54:35.977000 audit[2307]: AVC avc: denied { mac_admin } for pid=2307 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:35.977000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:35.977000 audit[2307]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c8fb00 a1=c000737b60 a2=c000c8fad0 a3=25 items=0 ppid=1 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:35.977000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:35.979017 kubelet[2307]: I1002 19:54:35.978999 2307 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:54:35.979477 kubelet[2307]: I1002 19:54:35.979458 2307 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:54:35.981388 kubelet[2307]: E1002 19:54:35.980481 2307 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-26-217\" not found" Oct 2 19:54:36.039699 kubelet[2307]: I1002 19:54:36.039652 2307 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:36.041177 kubelet[2307]: I1002 19:54:36.041142 2307 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:36.042640 kubelet[2307]: I1002 19:54:36.042619 2307 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:36.050949 systemd[1]: Created slice kubepods-burstable-pod2376340e4bf4f8586e31437d9198bf34.slice. Oct 2 19:54:36.060413 systemd[1]: Created slice kubepods-burstable-pod87d1005273f9aa1a8c702fc364261892.slice. Oct 2 19:54:36.065709 kubelet[2307]: I1002 19:54:36.065678 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-k8s-certs\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:36.065709 kubelet[2307]: I1002 19:54:36.065725 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:36.065919 kubelet[2307]: I1002 19:54:36.065757 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cbf4aa177f12da964852128c25af2ebc-kubeconfig\") pod \"kube-scheduler-ip-172-31-26-217\" (UID: \"cbf4aa177f12da964852128c25af2ebc\") " pod="kube-system/kube-scheduler-ip-172-31-26-217" Oct 2 19:54:36.065919 kubelet[2307]: I1002 19:54:36.065784 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/87d1005273f9aa1a8c702fc364261892-k8s-certs\") pod \"kube-apiserver-ip-172-31-26-217\" (UID: \"87d1005273f9aa1a8c702fc364261892\") " pod="kube-system/kube-apiserver-ip-172-31-26-217" Oct 2 19:54:36.065919 kubelet[2307]: I1002 19:54:36.065812 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/87d1005273f9aa1a8c702fc364261892-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-26-217\" (UID: \"87d1005273f9aa1a8c702fc364261892\") " pod="kube-system/kube-apiserver-ip-172-31-26-217" Oct 2 19:54:36.065919 kubelet[2307]: I1002 19:54:36.065838 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-ca-certs\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:36.065919 kubelet[2307]: I1002 19:54:36.065863 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:36.066086 kubelet[2307]: I1002 19:54:36.065894 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-kubeconfig\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:36.066086 kubelet[2307]: I1002 19:54:36.065924 2307 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/87d1005273f9aa1a8c702fc364261892-ca-certs\") pod \"kube-apiserver-ip-172-31-26-217\" (UID: \"87d1005273f9aa1a8c702fc364261892\") " pod="kube-system/kube-apiserver-ip-172-31-26-217" Oct 2 19:54:36.067061 kubelet[2307]: E1002 19:54:36.067040 2307 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.217:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-217?timeout=10s\": dial tcp 172.31.26.217:6443: connect: connection refused" interval="400ms" Oct 2 19:54:36.071006 systemd[1]: Created slice kubepods-burstable-podcbf4aa177f12da964852128c25af2ebc.slice. Oct 2 19:54:36.181208 kubelet[2307]: I1002 19:54:36.181170 2307 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-217" Oct 2 19:54:36.182913 kubelet[2307]: E1002 19:54:36.182888 2307 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.217:6443/api/v1/nodes\": dial tcp 172.31.26.217:6443: connect: connection refused" node="ip-172-31-26-217" Oct 2 19:54:36.359710 env[1634]: time="2023-10-02T19:54:36.359657285Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-26-217,Uid:2376340e4bf4f8586e31437d9198bf34,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:36.364557 env[1634]: time="2023-10-02T19:54:36.364512980Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-26-217,Uid:87d1005273f9aa1a8c702fc364261892,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:36.377583 env[1634]: time="2023-10-02T19:54:36.377533670Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-26-217,Uid:cbf4aa177f12da964852128c25af2ebc,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:36.468091 kubelet[2307]: E1002 19:54:36.467994 2307 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.217:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-217?timeout=10s\": dial tcp 172.31.26.217:6443: connect: connection refused" interval="800ms" Oct 2 19:54:36.584817 kubelet[2307]: I1002 19:54:36.584782 2307 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-217" Oct 2 19:54:36.585119 kubelet[2307]: E1002 19:54:36.585100 2307 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.217:6443/api/v1/nodes\": dial tcp 172.31.26.217:6443: connect: connection refused" node="ip-172-31-26-217" Oct 2 19:54:36.939910 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1571094965.mount: Deactivated successfully. Oct 2 19:54:36.944994 kubelet[2307]: W1002 19:54:36.944938 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.26.217:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:36.944994 kubelet[2307]: E1002 19:54:36.944997 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.26.217:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:36.947022 env[1634]: time="2023-10-02T19:54:36.946762676Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.950851 env[1634]: time="2023-10-02T19:54:36.950804626Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.953167 env[1634]: time="2023-10-02T19:54:36.953084303Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.954677 kubelet[2307]: W1002 19:54:36.954621 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.26.217:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:36.954847 kubelet[2307]: E1002 19:54:36.954684 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.26.217:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:36.955090 env[1634]: time="2023-10-02T19:54:36.955051347Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.960923 env[1634]: time="2023-10-02T19:54:36.960878989Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.962535 env[1634]: time="2023-10-02T19:54:36.962493890Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.963858 env[1634]: time="2023-10-02T19:54:36.963824270Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.965569 env[1634]: time="2023-10-02T19:54:36.965533782Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.966386 env[1634]: time="2023-10-02T19:54:36.966353834Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.968087 env[1634]: time="2023-10-02T19:54:36.968050180Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.975212 env[1634]: time="2023-10-02T19:54:36.975167834Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:36.979557 env[1634]: time="2023-10-02T19:54:36.979468931Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:54:37.035857 env[1634]: time="2023-10-02T19:54:37.035778587Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:37.035857 env[1634]: time="2023-10-02T19:54:37.035829299Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:37.036172 env[1634]: time="2023-10-02T19:54:37.036130476Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:37.036451 env[1634]: time="2023-10-02T19:54:37.036404260Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/614bff9f495a9d2bdcf74d222d56d080640b466521bb7d9d7d81237f882f76e2 pid=2348 runtime=io.containerd.runc.v2 Oct 2 19:54:37.064977 env[1634]: time="2023-10-02T19:54:37.064868128Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:37.065454 env[1634]: time="2023-10-02T19:54:37.064933996Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:37.065454 env[1634]: time="2023-10-02T19:54:37.064949040Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:37.065454 env[1634]: time="2023-10-02T19:54:37.065187846Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4af9b8d4513657c5340d9f52d9d6a041808e0dfb12ab3a3d46a22184bdee8881 pid=2363 runtime=io.containerd.runc.v2 Oct 2 19:54:37.089516 systemd[1]: Started cri-containerd-614bff9f495a9d2bdcf74d222d56d080640b466521bb7d9d7d81237f882f76e2.scope. Oct 2 19:54:37.113379 systemd[1]: Started cri-containerd-4af9b8d4513657c5340d9f52d9d6a041808e0dfb12ab3a3d46a22184bdee8881.scope. Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.128000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.129000 audit: BPF prog-id=70 op=LOAD Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2348 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631346266663966343935613964326264636637346432323264353664 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2348 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631346266663966343935613964326264636637346432323264353664 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit: BPF prog-id=71 op=LOAD Oct 2 19:54:37.130000 audit[2365]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000309200 items=0 ppid=2348 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631346266663966343935613964326264636637346432323264353664 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit: BPF prog-id=72 op=LOAD Oct 2 19:54:37.130000 audit[2365]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000309248 items=0 ppid=2348 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631346266663966343935613964326264636637346432323264353664 Oct 2 19:54:37.130000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:54:37.130000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.130000 audit: BPF prog-id=73 op=LOAD Oct 2 19:54:37.130000 audit[2365]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000309658 items=0 ppid=2348 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631346266663966343935613964326264636637346432323264353664 Oct 2 19:54:37.143839 kubelet[2307]: W1002 19:54:37.141151 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.26.217:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-217&limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:37.143839 kubelet[2307]: E1002 19:54:37.141295 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.26.217:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-26-217&limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:37.152648 env[1634]: time="2023-10-02T19:54:37.152540056Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:37.153014 env[1634]: time="2023-10-02T19:54:37.152978891Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:37.153149 env[1634]: time="2023-10-02T19:54:37.153124131Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:37.153728 env[1634]: time="2023-10-02T19:54:37.153683829Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/df7c38f8ee1a9835a3c70c2711e41077781d424b3f86fd16d9b1dea43e92bc40 pid=2413 runtime=io.containerd.runc.v2 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit: BPF prog-id=74 op=LOAD Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2363 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663962386434353133363537633533343064396635326439643661 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2363 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663962386434353133363537633533343064396635326439643661 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.164000 audit: BPF prog-id=75 op=LOAD Oct 2 19:54:37.164000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00024a170 items=0 ppid=2363 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663962386434353133363537633533343064396635326439643661 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit: BPF prog-id=76 op=LOAD Oct 2 19:54:37.165000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00024a1b8 items=0 ppid=2363 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663962386434353133363537633533343064396635326439643661 Oct 2 19:54:37.165000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:54:37.165000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.165000 audit: BPF prog-id=77 op=LOAD Oct 2 19:54:37.165000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00024a5c8 items=0 ppid=2363 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663962386434353133363537633533343064396635326439643661 Oct 2 19:54:37.175245 systemd[1]: Started cri-containerd-df7c38f8ee1a9835a3c70c2711e41077781d424b3f86fd16d9b1dea43e92bc40.scope. Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.210000 audit: BPF prog-id=78 op=LOAD Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2413 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466376333386638656531613938333561336337306332373131653431 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2413 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466376333386638656531613938333561336337306332373131653431 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit: BPF prog-id=79 op=LOAD Oct 2 19:54:37.211000 audit[2424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000230370 items=0 ppid=2413 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466376333386638656531613938333561336337306332373131653431 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit: BPF prog-id=80 op=LOAD Oct 2 19:54:37.211000 audit[2424]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002303b8 items=0 ppid=2413 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466376333386638656531613938333561336337306332373131653431 Oct 2 19:54:37.211000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:54:37.211000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { perfmon } for pid=2424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit[2424]: AVC avc: denied { bpf } for pid=2424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.211000 audit: BPF prog-id=81 op=LOAD Oct 2 19:54:37.211000 audit[2424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002307c8 items=0 ppid=2413 pid=2424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6466376333386638656531613938333561336337306332373131653431 Oct 2 19:54:37.269042 kubelet[2307]: E1002 19:54:37.269006 2307 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.26.217:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-26-217?timeout=10s\": dial tcp 172.31.26.217:6443: connect: connection refused" interval="1.6s" Oct 2 19:54:37.289643 env[1634]: time="2023-10-02T19:54:37.289516399Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-26-217,Uid:cbf4aa177f12da964852128c25af2ebc,Namespace:kube-system,Attempt:0,} returns sandbox id \"614bff9f495a9d2bdcf74d222d56d080640b466521bb7d9d7d81237f882f76e2\"" Oct 2 19:54:37.296560 env[1634]: time="2023-10-02T19:54:37.296514083Z" level=info msg="CreateContainer within sandbox \"614bff9f495a9d2bdcf74d222d56d080640b466521bb7d9d7d81237f882f76e2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:54:37.308772 env[1634]: time="2023-10-02T19:54:37.308724202Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-26-217,Uid:2376340e4bf4f8586e31437d9198bf34,Namespace:kube-system,Attempt:0,} returns sandbox id \"4af9b8d4513657c5340d9f52d9d6a041808e0dfb12ab3a3d46a22184bdee8881\"" Oct 2 19:54:37.318314 env[1634]: time="2023-10-02T19:54:37.318081687Z" level=info msg="CreateContainer within sandbox \"4af9b8d4513657c5340d9f52d9d6a041808e0dfb12ab3a3d46a22184bdee8881\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:54:37.332296 env[1634]: time="2023-10-02T19:54:37.332230695Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-26-217,Uid:87d1005273f9aa1a8c702fc364261892,Namespace:kube-system,Attempt:0,} returns sandbox id \"df7c38f8ee1a9835a3c70c2711e41077781d424b3f86fd16d9b1dea43e92bc40\"" Oct 2 19:54:37.337761 env[1634]: time="2023-10-02T19:54:37.337716234Z" level=info msg="CreateContainer within sandbox \"df7c38f8ee1a9835a3c70c2711e41077781d424b3f86fd16d9b1dea43e92bc40\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:54:37.360578 env[1634]: time="2023-10-02T19:54:37.360526082Z" level=info msg="CreateContainer within sandbox \"614bff9f495a9d2bdcf74d222d56d080640b466521bb7d9d7d81237f882f76e2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e2f9cb2be7aa9e1cda2d27cbe49c81c81b5f3644886e8259bffbfd014f0a8cdb\"" Oct 2 19:54:37.363728 env[1634]: time="2023-10-02T19:54:37.363633297Z" level=info msg="CreateContainer within sandbox \"4af9b8d4513657c5340d9f52d9d6a041808e0dfb12ab3a3d46a22184bdee8881\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"b8553d821ac3272e0bcd97871192bac71d6e938eef94b5307ec2b6e7f94aaf53\"" Oct 2 19:54:37.364405 env[1634]: time="2023-10-02T19:54:37.364369868Z" level=info msg="StartContainer for \"b8553d821ac3272e0bcd97871192bac71d6e938eef94b5307ec2b6e7f94aaf53\"" Oct 2 19:54:37.366420 env[1634]: time="2023-10-02T19:54:37.366350755Z" level=info msg="StartContainer for \"e2f9cb2be7aa9e1cda2d27cbe49c81c81b5f3644886e8259bffbfd014f0a8cdb\"" Oct 2 19:54:37.372761 env[1634]: time="2023-10-02T19:54:37.372670622Z" level=info msg="CreateContainer within sandbox \"df7c38f8ee1a9835a3c70c2711e41077781d424b3f86fd16d9b1dea43e92bc40\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"3415e4e2e4a48a4ab00471d2cab9d233f704f8762a3963a38d18e0b0e53a7921\"" Oct 2 19:54:37.374140 env[1634]: time="2023-10-02T19:54:37.374107201Z" level=info msg="StartContainer for \"3415e4e2e4a48a4ab00471d2cab9d233f704f8762a3963a38d18e0b0e53a7921\"" Oct 2 19:54:37.388992 kubelet[2307]: I1002 19:54:37.388316 2307 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-217" Oct 2 19:54:37.388992 kubelet[2307]: E1002 19:54:37.388963 2307 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.26.217:6443/api/v1/nodes\": dial tcp 172.31.26.217:6443: connect: connection refused" node="ip-172-31-26-217" Oct 2 19:54:37.414011 systemd[1]: Started cri-containerd-b8553d821ac3272e0bcd97871192bac71d6e938eef94b5307ec2b6e7f94aaf53.scope. Oct 2 19:54:37.439338 systemd[1]: Started cri-containerd-e2f9cb2be7aa9e1cda2d27cbe49c81c81b5f3644886e8259bffbfd014f0a8cdb.scope. Oct 2 19:54:37.463471 systemd[1]: Started cri-containerd-3415e4e2e4a48a4ab00471d2cab9d233f704f8762a3963a38d18e0b0e53a7921.scope. Oct 2 19:54:37.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.478000 audit: BPF prog-id=82 op=LOAD Oct 2 19:54:37.479000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.479000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2363 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353533643832316163333237326530626364393738373131393262 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2363 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353533643832316163333237326530626364393738373131393262 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit: BPF prog-id=83 op=LOAD Oct 2 19:54:37.480000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002187e0 items=0 ppid=2363 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353533643832316163333237326530626364393738373131393262 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit: BPF prog-id=84 op=LOAD Oct 2 19:54:37.480000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000218828 items=0 ppid=2363 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353533643832316163333237326530626364393738373131393262 Oct 2 19:54:37.480000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:54:37.480000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { perfmon } for pid=2484 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit[2484]: AVC avc: denied { bpf } for pid=2484 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.480000 audit: BPF prog-id=85 op=LOAD Oct 2 19:54:37.480000 audit[2484]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000218c38 items=0 ppid=2363 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238353533643832316163333237326530626364393738373131393262 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.519000 audit: BPF prog-id=86 op=LOAD Oct 2 19:54:37.520000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.520000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2348 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.523416 kubelet[2307]: W1002 19:54:37.522996 2307 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.26.217:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:37.523416 kubelet[2307]: E1002 19:54:37.523052 2307 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.26.217:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:37.520000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532663963623262653761613965316364613264323763626534396338 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2348 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532663963623262653761613965316364613264323763626534396338 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.523000 audit: BPF prog-id=87 op=LOAD Oct 2 19:54:37.523000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028d110 items=0 ppid=2348 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532663963623262653761613965316364613264323763626534396338 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.524000 audit: BPF prog-id=88 op=LOAD Oct 2 19:54:37.524000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028d158 items=0 ppid=2348 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532663963623262653761613965316364613264323763626534396338 Oct 2 19:54:37.525000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:54:37.528000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.528000 audit: BPF prog-id=89 op=LOAD Oct 2 19:54:37.528000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028d568 items=0 ppid=2348 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532663963623262653761613965316364613264323763626534396338 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.568000 audit: BPF prog-id=90 op=LOAD Oct 2 19:54:37.570000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.570000 audit[2497]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2413 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313565346532653461343861346162303034373164326361623964 Oct 2 19:54:37.571000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.571000 audit[2497]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2413 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313565346532653461343861346162303034373164326361623964 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.572000 audit: BPF prog-id=91 op=LOAD Oct 2 19:54:37.572000 audit[2497]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000285660 items=0 ppid=2413 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313565346532653461343861346162303034373164326361623964 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.573000 audit: BPF prog-id=92 op=LOAD Oct 2 19:54:37.573000 audit[2497]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002856a8 items=0 ppid=2413 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313565346532653461343861346162303034373164326361623964 Oct 2 19:54:37.576000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:54:37.576000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.578579 env[1634]: time="2023-10-02T19:54:37.578535453Z" level=info msg="StartContainer for \"b8553d821ac3272e0bcd97871192bac71d6e938eef94b5307ec2b6e7f94aaf53\" returns successfully" Oct 2 19:54:37.576000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:37.576000 audit: BPF prog-id=93 op=LOAD Oct 2 19:54:37.576000 audit[2497]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000285ab8 items=0 ppid=2413 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:37.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313565346532653461343861346162303034373164326361623964 Oct 2 19:54:37.644247 env[1634]: time="2023-10-02T19:54:37.644189460Z" level=info msg="StartContainer for \"e2f9cb2be7aa9e1cda2d27cbe49c81c81b5f3644886e8259bffbfd014f0a8cdb\" returns successfully" Oct 2 19:54:37.661647 env[1634]: time="2023-10-02T19:54:37.661564751Z" level=info msg="StartContainer for \"3415e4e2e4a48a4ab00471d2cab9d233f704f8762a3963a38d18e0b0e53a7921\" returns successfully" Oct 2 19:54:37.938780 kubelet[2307]: E1002 19:54:37.938740 2307 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.26.217:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.26.217:6443: connect: connection refused Oct 2 19:54:38.991451 kubelet[2307]: I1002 19:54:38.991421 2307 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-217" Oct 2 19:54:39.611382 update_engine[1630]: I1002 19:54:39.611315 1630 update_attempter.cc:505] Updating boot flags... Oct 2 19:54:39.652027 kernel: kauditd_printk_skb: 555 callbacks suppressed Oct 2 19:54:39.652497 kernel: audit: type=1400 audit(1696276479.642:722): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:39.642000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:39.678483 kernel: audit: type=1300 audit(1696276479.642:722): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000cfe000 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:39.642000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000cfe000 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:39.642000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:39.647000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:39.696946 kernel: audit: type=1327 audit(1696276479.642:722): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:39.697050 kernel: audit: type=1400 audit(1696276479.647:723): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:39.647000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000056540 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:39.722948 kernel: audit: type=1300 audit(1696276479.647:723): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000056540 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:39.723111 kernel: audit: type=1327 audit(1696276479.647:723): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:39.647000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:41.243000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.258026 kernel: audit: type=1400 audit(1696276481.243:724): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.258180 kernel: audit: type=1400 audit(1696276481.243:725): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.243000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.291301 kernel: audit: type=1300 audit(1696276481.243:725): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003e25590 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:54:41.243000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003e25590 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:54:41.243000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:54:41.311292 kernel: audit: type=1327 audit(1696276481.243:725): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:54:41.243000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c003de24e0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:54:41.243000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:54:41.243000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.243000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c008b60040 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:54:41.243000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:54:41.261000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.261000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c0042f2d20 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:54:41.261000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:54:41.269000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.269000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00590a340 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:54:41.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:54:41.269000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:41.269000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00433c7e0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:54:41.269000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:54:41.596626 kubelet[2307]: E1002 19:54:41.596491 2307 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-26-217\" not found" node="ip-172-31-26-217" Oct 2 19:54:41.601978 kubelet[2307]: I1002 19:54:41.601942 2307 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-26-217" Oct 2 19:54:41.650969 kubelet[2307]: E1002 19:54:41.650866 2307 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-26-217.178a6277afdcaaf6", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-26-217", UID:"ip-172-31-26-217", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-26-217"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 35, 849517814, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 35, 849517814, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:41.708033 kubelet[2307]: E1002 19:54:41.707917 2307 event.go:280] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-26-217.178a6277b042e5f3", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-26-217", UID:"ip-172-31-26-217", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-26-217"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 54, 35, 856217587, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 54, 35, 856217587, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 19:54:41.769796 kubelet[2307]: E1002 19:54:41.769761 2307 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-26-217\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-26-217" Oct 2 19:54:41.867357 kubelet[2307]: I1002 19:54:41.866371 2307 apiserver.go:52] "Watching apiserver" Oct 2 19:54:41.964668 kubelet[2307]: I1002 19:54:41.964627 2307 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:54:42.039990 kubelet[2307]: I1002 19:54:42.039922 2307 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:54:43.966326 systemd[1]: Reloading. Oct 2 19:54:44.091657 /usr/lib/systemd/system-generators/torcx-generator[2697]: time="2023-10-02T19:54:44Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:54:44.092213 /usr/lib/systemd/system-generators/torcx-generator[2697]: time="2023-10-02T19:54:44Z" level=info msg="torcx already run" Oct 2 19:54:44.214823 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:54:44.214849 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:54:44.239794 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.365000 audit: BPF prog-id=94 op=LOAD Oct 2 19:54:44.365000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.367000 audit: BPF prog-id=95 op=LOAD Oct 2 19:54:44.367000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.370000 audit: BPF prog-id=96 op=LOAD Oct 2 19:54:44.370000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:54:44.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.373000 audit: BPF prog-id=97 op=LOAD Oct 2 19:54:44.373000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:54:44.373000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit: BPF prog-id=98 op=LOAD Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.374000 audit: BPF prog-id=99 op=LOAD Oct 2 19:54:44.374000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:54:44.374000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.380000 audit: BPF prog-id=100 op=LOAD Oct 2 19:54:44.380000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.383000 audit: BPF prog-id=101 op=LOAD Oct 2 19:54:44.383000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit: BPF prog-id=102 op=LOAD Oct 2 19:54:44.385000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit: BPF prog-id=103 op=LOAD Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.385000 audit: BPF prog-id=104 op=LOAD Oct 2 19:54:44.385000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:54:44.385000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.388000 audit: BPF prog-id=105 op=LOAD Oct 2 19:54:44.388000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit: BPF prog-id=106 op=LOAD Oct 2 19:54:44.391000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit: BPF prog-id=107 op=LOAD Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.391000 audit: BPF prog-id=108 op=LOAD Oct 2 19:54:44.391000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:54:44.391000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.392000 audit: BPF prog-id=109 op=LOAD Oct 2 19:54:44.392000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit: BPF prog-id=110 op=LOAD Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.393000 audit: BPF prog-id=111 op=LOAD Oct 2 19:54:44.393000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:54:44.393000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.396000 audit: BPF prog-id=112 op=LOAD Oct 2 19:54:44.396000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.397000 audit: BPF prog-id=113 op=LOAD Oct 2 19:54:44.397000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.398000 audit: BPF prog-id=114 op=LOAD Oct 2 19:54:44.398000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:54:44.423817 systemd[1]: Stopping kubelet.service... Oct 2 19:54:44.450095 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:54:44.450877 systemd[1]: Stopped kubelet.service. Oct 2 19:54:44.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.450958 systemd[1]: kubelet.service: Consumed 1.119s CPU time. Oct 2 19:54:44.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.453601 systemd[1]: Started kubelet.service. Oct 2 19:54:44.609031 kubelet[2747]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:44.609031 kubelet[2747]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:54:44.609031 kubelet[2747]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:54:44.609031 kubelet[2747]: I1002 19:54:44.608676 2747 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:54:44.628913 kubelet[2747]: I1002 19:54:44.628872 2747 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:54:44.628913 kubelet[2747]: I1002 19:54:44.628900 2747 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:54:44.629347 kubelet[2747]: I1002 19:54:44.629186 2747 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:54:44.631979 kubelet[2747]: I1002 19:54:44.631951 2747 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:54:44.634000 audit[2757]: USER_ACCT pid=2757 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.635319 sudo[2757]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:54:44.635000 audit[2757]: CRED_REFR pid=2757 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.636410 sudo[2757]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:54:44.637708 kubelet[2747]: I1002 19:54:44.637493 2747 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:54:44.637858 kubelet[2747]: I1002 19:54:44.637791 2747 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:54:44.637913 kubelet[2747]: I1002 19:54:44.637891 2747 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:54:44.638030 kubelet[2747]: I1002 19:54:44.637915 2747 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:54:44.638030 kubelet[2747]: I1002 19:54:44.637930 2747 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:54:44.638030 kubelet[2747]: I1002 19:54:44.637969 2747 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:44.639000 audit[2757]: USER_START pid=2757 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:44.641337 kubelet[2747]: I1002 19:54:44.640630 2747 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:54:44.644553 kubelet[2747]: I1002 19:54:44.644524 2747 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:54:44.644553 kubelet[2747]: I1002 19:54:44.644555 2747 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:54:44.644739 kubelet[2747]: I1002 19:54:44.644576 2747 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:54:44.644739 kubelet[2747]: I1002 19:54:44.644592 2747 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:54:44.645857 kubelet[2747]: I1002 19:54:44.645834 2747 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:54:44.646823 kubelet[2747]: I1002 19:54:44.646446 2747 server.go:1168] "Started kubelet" Oct 2 19:54:44.653000 audit[2747]: AVC avc: denied { mac_admin } for pid=2747 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.655631 kernel: kauditd_printk_skb: 263 callbacks suppressed Oct 2 19:54:44.655721 kernel: audit: type=1400 audit(1696276484.653:979): avc: denied { mac_admin } for pid=2747 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.653000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:44.665488 kernel: audit: type=1401 audit(1696276484.653:979): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:44.665649 kubelet[2747]: I1002 19:54:44.665619 2747 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:54:44.665768 kubelet[2747]: I1002 19:54:44.665689 2747 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:54:44.665768 kubelet[2747]: I1002 19:54:44.665733 2747 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:54:44.682283 kernel: audit: type=1300 audit(1696276484.653:979): arch=c000003e syscall=188 success=no exit=-22 a0=c000b975f0 a1=c00083b0b0 a2=c000b975c0 a3=25 items=0 ppid=1 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:44.653000 audit[2747]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b975f0 a1=c00083b0b0 a2=c000b975c0 a3=25 items=0 ppid=1 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:44.682833 kubelet[2747]: I1002 19:54:44.682810 2747 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:54:44.684803 kubelet[2747]: I1002 19:54:44.684774 2747 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:54:44.687107 kubelet[2747]: I1002 19:54:44.686837 2747 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:54:44.653000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:44.700347 kernel: audit: type=1327 audit(1696276484.653:979): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:44.700565 kubelet[2747]: I1002 19:54:44.700540 2747 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:54:44.701532 kubelet[2747]: I1002 19:54:44.701507 2747 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:54:44.665000 audit[2747]: AVC avc: denied { mac_admin } for pid=2747 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.728287 kernel: audit: type=1400 audit(1696276484.665:980): avc: denied { mac_admin } for pid=2747 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.749308 kernel: audit: type=1401 audit(1696276484.665:980): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:44.749430 kernel: audit: type=1300 audit(1696276484.665:980): arch=c000003e syscall=188 success=no exit=-22 a0=c000b94880 a1=c00083b0c8 a2=c000b97680 a3=25 items=0 ppid=1 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:44.665000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:44.665000 audit[2747]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b94880 a1=c00083b0c8 a2=c000b97680 a3=25 items=0 ppid=1 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:44.759996 kubelet[2747]: E1002 19:54:44.759966 2747 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:54:44.760208 kubelet[2747]: E1002 19:54:44.760195 2747 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:54:44.665000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:44.773288 kernel: audit: type=1327 audit(1696276484.665:980): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:44.841412 kubelet[2747]: E1002 19:54:44.836950 2747 container_manager_linux.go:900] "Unable to get rootfs data from cAdvisor interface" err="unable to find data in memory cache" Oct 2 19:54:44.846606 kubelet[2747]: I1002 19:54:44.845438 2747 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-26-217" Oct 2 19:54:44.850535 kubelet[2747]: I1002 19:54:44.850475 2747 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:54:44.855851 kubelet[2747]: I1002 19:54:44.855810 2747 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:54:44.855851 kubelet[2747]: I1002 19:54:44.855844 2747 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:54:44.856101 kubelet[2747]: I1002 19:54:44.855871 2747 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:54:44.856101 kubelet[2747]: E1002 19:54:44.855930 2747 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:54:44.890645 kubelet[2747]: I1002 19:54:44.890554 2747 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-26-217" Oct 2 19:54:44.890866 kubelet[2747]: I1002 19:54:44.890854 2747 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-26-217" Oct 2 19:54:44.957383 kubelet[2747]: E1002 19:54:44.957314 2747 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.960705 2747 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.960729 2747 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.960746 2747 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.961634 2747 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.961656 2747 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.961665 2747 policy_none.go:49] "None policy: Start" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.962875 2747 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.962897 2747 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:54:44.963663 kubelet[2747]: I1002 19:54:44.963347 2747 state_mem.go:75] "Updated machine memory state" Oct 2 19:54:44.972093 kubelet[2747]: I1002 19:54:44.971188 2747 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:54:44.973000 audit[2747]: AVC avc: denied { mac_admin } for pid=2747 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.978612 kubelet[2747]: I1002 19:54:44.973463 2747 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:54:44.978612 kubelet[2747]: I1002 19:54:44.973868 2747 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:54:44.982968 kernel: audit: type=1400 audit(1696276484.973:981): avc: denied { mac_admin } for pid=2747 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:44.983208 kernel: audit: type=1401 audit(1696276484.973:981): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:44.973000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:54:44.973000 audit[2747]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001216ea0 a1=c0010234d0 a2=c001216e70 a3=25 items=0 ppid=1 pid=2747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:44.973000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:54:45.157900 kubelet[2747]: I1002 19:54:45.157783 2747 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:45.158117 kubelet[2747]: I1002 19:54:45.157909 2747 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:45.158117 kubelet[2747]: I1002 19:54:45.157951 2747 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:45.218564 kubelet[2747]: I1002 19:54:45.218500 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/cbf4aa177f12da964852128c25af2ebc-kubeconfig\") pod \"kube-scheduler-ip-172-31-26-217\" (UID: \"cbf4aa177f12da964852128c25af2ebc\") " pod="kube-system/kube-scheduler-ip-172-31-26-217" Oct 2 19:54:45.219478 kubelet[2747]: I1002 19:54:45.218590 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:45.219478 kubelet[2747]: I1002 19:54:45.218621 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-k8s-certs\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:45.219478 kubelet[2747]: I1002 19:54:45.218648 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-kubeconfig\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:45.219478 kubelet[2747]: I1002 19:54:45.218675 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/87d1005273f9aa1a8c702fc364261892-ca-certs\") pod \"kube-apiserver-ip-172-31-26-217\" (UID: \"87d1005273f9aa1a8c702fc364261892\") " pod="kube-system/kube-apiserver-ip-172-31-26-217" Oct 2 19:54:45.219478 kubelet[2747]: I1002 19:54:45.218702 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/87d1005273f9aa1a8c702fc364261892-k8s-certs\") pod \"kube-apiserver-ip-172-31-26-217\" (UID: \"87d1005273f9aa1a8c702fc364261892\") " pod="kube-system/kube-apiserver-ip-172-31-26-217" Oct 2 19:54:45.220025 kubelet[2747]: I1002 19:54:45.218732 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/87d1005273f9aa1a8c702fc364261892-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-26-217\" (UID: \"87d1005273f9aa1a8c702fc364261892\") " pod="kube-system/kube-apiserver-ip-172-31-26-217" Oct 2 19:54:45.220025 kubelet[2747]: I1002 19:54:45.219418 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-ca-certs\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:45.220025 kubelet[2747]: I1002 19:54:45.219472 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/2376340e4bf4f8586e31437d9198bf34-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-26-217\" (UID: \"2376340e4bf4f8586e31437d9198bf34\") " pod="kube-system/kube-controller-manager-ip-172-31-26-217" Oct 2 19:54:45.667568 kubelet[2747]: I1002 19:54:45.667527 2747 apiserver.go:52] "Watching apiserver" Oct 2 19:54:45.702576 kubelet[2747]: I1002 19:54:45.702510 2747 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:54:45.722184 kubelet[2747]: I1002 19:54:45.722149 2747 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:54:45.741442 sudo[2757]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:45.741000 audit[2757]: USER_END pid=2757 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.741000 audit[2757]: CRED_DISP pid=2757 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:45.989463 kubelet[2747]: I1002 19:54:45.989334 2747 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-26-217" podStartSLOduration=0.988894314 podCreationTimestamp="2023-10-02 19:54:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:45.966021299 +0000 UTC m=+1.490871221" watchObservedRunningTime="2023-10-02 19:54:45.988894314 +0000 UTC m=+1.513744229" Oct 2 19:54:46.006277 kubelet[2747]: I1002 19:54:46.006238 2747 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-26-217" podStartSLOduration=1.006177998 podCreationTimestamp="2023-10-02 19:54:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:45.991372647 +0000 UTC m=+1.516222571" watchObservedRunningTime="2023-10-02 19:54:46.006177998 +0000 UTC m=+1.531027914" Oct 2 19:54:46.024703 kubelet[2747]: I1002 19:54:46.024666 2747 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-26-217" podStartSLOduration=1.024589715 podCreationTimestamp="2023-10-02 19:54:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:54:46.00785278 +0000 UTC m=+1.532702703" watchObservedRunningTime="2023-10-02 19:54:46.024589715 +0000 UTC m=+1.549439631" Oct 2 19:54:47.507176 sudo[1898]: pam_unix(sudo:session): session closed for user root Oct 2 19:54:47.506000 audit[1898]: USER_END pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.507000 audit[1898]: CRED_DISP pid=1898 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.539381 sshd[1895]: pam_unix(sshd:session): session closed for user core Oct 2 19:54:47.543000 audit[1895]: USER_END pid=1895 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:47.546000 audit[1895]: CRED_DISP pid=1895 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:54:47.549459 systemd[1]: sshd@6-172.31.26.217:22-139.178.89.65:41318.service: Deactivated successfully. Oct 2 19:54:47.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.26.217:22-139.178.89.65:41318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:54:47.550894 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:54:47.551218 systemd[1]: session-7.scope: Consumed 3.794s CPU time. Oct 2 19:54:47.552023 systemd-logind[1629]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:54:47.553554 systemd-logind[1629]: Removed session 7. Oct 2 19:54:57.844000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:54:57.846673 kernel: kauditd_printk_skb: 9 callbacks suppressed Oct 2 19:54:57.846796 kernel: audit: type=1400 audit(1696276497.844:989): avc: denied { watch } for pid=2519 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:54:57.844000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001151ac0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:57.869290 kernel: audit: type=1300 audit(1696276497.844:989): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001151ac0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:57.844000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:57.879311 kernel: audit: type=1327 audit(1696276497.844:989): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.335000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.348112 kernel: audit: type=1400 audit(1696276498.335:990): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.348241 kernel: audit: type=1400 audit(1696276498.339:991): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.348295 kernel: audit: type=1300 audit(1696276498.339:991): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bd7c0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:58.339000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.339000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bd7c0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:58.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.362041 kernel: audit: type=1327 audit(1696276498.339:991): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.362172 kernel: audit: type=1400 audit(1696276498.339:992): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.339000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.339000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bd800 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:58.377102 kernel: audit: type=1300 audit(1696276498.339:992): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bd800 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:58.377243 kernel: audit: type=1327 audit(1696276498.339:992): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.339000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:54:58.339000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bd840 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:58.339000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.335000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00134a040 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:54:58.335000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:54:58.589207 kubelet[2747]: I1002 19:54:58.588943 2747 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:54:58.590037 env[1634]: time="2023-10-02T19:54:58.589995247Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:54:58.593674 kubelet[2747]: I1002 19:54:58.592109 2747 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:54:59.459911 kubelet[2747]: I1002 19:54:59.459873 2747 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:59.467962 systemd[1]: Created slice kubepods-besteffort-pod17cebf6b_e7b6_47ac_99f8_510e57190f88.slice. Oct 2 19:54:59.490902 kubelet[2747]: I1002 19:54:59.490864 2747 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:59.498081 systemd[1]: Created slice kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice. Oct 2 19:54:59.521730 kubelet[2747]: I1002 19:54:59.521688 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-kernel\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.521956 kubelet[2747]: I1002 19:54:59.521760 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5szr6\" (UniqueName: \"kubernetes.io/projected/17cebf6b-e7b6-47ac-99f8-510e57190f88-kube-api-access-5szr6\") pod \"kube-proxy-5mgcd\" (UID: \"17cebf6b-e7b6-47ac-99f8-510e57190f88\") " pod="kube-system/kube-proxy-5mgcd" Oct 2 19:54:59.521956 kubelet[2747]: I1002 19:54:59.521792 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-lib-modules\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.521956 kubelet[2747]: I1002 19:54:59.521831 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/62014256-7954-4659-a6be-c99f9f52189c-clustermesh-secrets\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.521956 kubelet[2747]: I1002 19:54:59.521859 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-net\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.521956 kubelet[2747]: I1002 19:54:59.521904 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rkbbf\" (UniqueName: \"kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-kube-api-access-rkbbf\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522280 kubelet[2747]: I1002 19:54:59.521932 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-run\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522280 kubelet[2747]: I1002 19:54:59.521977 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-hostproc\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522280 kubelet[2747]: I1002 19:54:59.522016 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-xtables-lock\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522280 kubelet[2747]: I1002 19:54:59.522145 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/62014256-7954-4659-a6be-c99f9f52189c-cilium-config-path\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522280 kubelet[2747]: I1002 19:54:59.522186 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-cgroup\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522280 kubelet[2747]: I1002 19:54:59.522233 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-etc-cni-netd\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522542 kubelet[2747]: I1002 19:54:59.522282 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/17cebf6b-e7b6-47ac-99f8-510e57190f88-lib-modules\") pod \"kube-proxy-5mgcd\" (UID: \"17cebf6b-e7b6-47ac-99f8-510e57190f88\") " pod="kube-system/kube-proxy-5mgcd" Oct 2 19:54:59.522542 kubelet[2747]: I1002 19:54:59.522314 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/17cebf6b-e7b6-47ac-99f8-510e57190f88-kube-proxy\") pod \"kube-proxy-5mgcd\" (UID: \"17cebf6b-e7b6-47ac-99f8-510e57190f88\") " pod="kube-system/kube-proxy-5mgcd" Oct 2 19:54:59.522542 kubelet[2747]: I1002 19:54:59.522360 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-bpf-maps\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522542 kubelet[2747]: I1002 19:54:59.522395 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-hubble-tls\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.522542 kubelet[2747]: I1002 19:54:59.522445 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/17cebf6b-e7b6-47ac-99f8-510e57190f88-xtables-lock\") pod \"kube-proxy-5mgcd\" (UID: \"17cebf6b-e7b6-47ac-99f8-510e57190f88\") " pod="kube-system/kube-proxy-5mgcd" Oct 2 19:54:59.522542 kubelet[2747]: I1002 19:54:59.522479 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cni-path\") pod \"cilium-7b6w5\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " pod="kube-system/cilium-7b6w5" Oct 2 19:54:59.576833 kubelet[2747]: I1002 19:54:59.576799 2747 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:54:59.583830 systemd[1]: Created slice kubepods-besteffort-pod28948759_ed20_4a22_8986_6bf20a4f3d02.slice. Oct 2 19:54:59.623672 kubelet[2747]: I1002 19:54:59.623636 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/28948759-ed20-4a22-8986-6bf20a4f3d02-cilium-config-path\") pod \"cilium-operator-574c4bb98d-bpr8w\" (UID: \"28948759-ed20-4a22-8986-6bf20a4f3d02\") " pod="kube-system/cilium-operator-574c4bb98d-bpr8w" Oct 2 19:54:59.624115 kubelet[2747]: I1002 19:54:59.623705 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jr8tr\" (UniqueName: \"kubernetes.io/projected/28948759-ed20-4a22-8986-6bf20a4f3d02-kube-api-access-jr8tr\") pod \"cilium-operator-574c4bb98d-bpr8w\" (UID: \"28948759-ed20-4a22-8986-6bf20a4f3d02\") " pod="kube-system/cilium-operator-574c4bb98d-bpr8w" Oct 2 19:54:59.780714 env[1634]: time="2023-10-02T19:54:59.779562332Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5mgcd,Uid:17cebf6b-e7b6-47ac-99f8-510e57190f88,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:59.810293 env[1634]: time="2023-10-02T19:54:59.809565863Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:59.810293 env[1634]: time="2023-10-02T19:54:59.809636211Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:59.810293 env[1634]: time="2023-10-02T19:54:59.809661042Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:59.810293 env[1634]: time="2023-10-02T19:54:59.810124226Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/afadfc71d74c3f474743b08373a520e454c4fe7c1a280f37ed233251c47ef4c9 pid=2824 runtime=io.containerd.runc.v2 Oct 2 19:54:59.811661 env[1634]: time="2023-10-02T19:54:59.810367834Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-7b6w5,Uid:62014256-7954-4659-a6be-c99f9f52189c,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:59.833996 systemd[1]: Started cri-containerd-afadfc71d74c3f474743b08373a520e454c4fe7c1a280f37ed233251c47ef4c9.scope. Oct 2 19:54:59.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.863000 audit: BPF prog-id=115 op=LOAD Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=2824 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616466633731643734633366343734373433623038333733613532 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=c items=0 ppid=2824 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616466633731643734633366343734373433623038333733613532 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit: BPF prog-id=116 op=LOAD Oct 2 19:54:59.864000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c00032ba50 items=0 ppid=2824 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616466633731643734633366343734373433623038333733613532 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit: BPF prog-id=117 op=LOAD Oct 2 19:54:59.864000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c00032ba98 items=0 ppid=2824 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616466633731643734633366343734373433623038333733613532 Oct 2 19:54:59.864000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:54:59.864000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { perfmon } for pid=2836 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit[2836]: AVC avc: denied { bpf } for pid=2836 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.864000 audit: BPF prog-id=118 op=LOAD Oct 2 19:54:59.864000 audit[2836]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c00032bea8 items=0 ppid=2824 pid=2836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166616466633731643734633366343734373433623038333733613532 Oct 2 19:54:59.894082 env[1634]: time="2023-10-02T19:54:59.894034908Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-bpr8w,Uid:28948759-ed20-4a22-8986-6bf20a4f3d02,Namespace:kube-system,Attempt:0,}" Oct 2 19:54:59.895965 env[1634]: time="2023-10-02T19:54:59.895763107Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-5mgcd,Uid:17cebf6b-e7b6-47ac-99f8-510e57190f88,Namespace:kube-system,Attempt:0,} returns sandbox id \"afadfc71d74c3f474743b08373a520e454c4fe7c1a280f37ed233251c47ef4c9\"" Oct 2 19:54:59.913084 env[1634]: time="2023-10-02T19:54:59.913037603Z" level=info msg="CreateContainer within sandbox \"afadfc71d74c3f474743b08373a520e454c4fe7c1a280f37ed233251c47ef4c9\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:54:59.921797 env[1634]: time="2023-10-02T19:54:59.921583657Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:54:59.921797 env[1634]: time="2023-10-02T19:54:59.921630145Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:54:59.921797 env[1634]: time="2023-10-02T19:54:59.921641097Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:54:59.922060 env[1634]: time="2023-10-02T19:54:59.921892368Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8 pid=2868 runtime=io.containerd.runc.v2 Oct 2 19:54:59.945564 systemd[1]: Started cri-containerd-a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8.scope. Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.970000 audit: BPF prog-id=119 op=LOAD Oct 2 19:54:59.972000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.972000 audit[2876]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2868 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130393039653566666532313839626239663136313763616631303561 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2868 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130393039653566666532313839626239663136313763616631303561 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.973000 audit: BPF prog-id=120 op=LOAD Oct 2 19:54:59.973000 audit[2876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c2540 items=0 ppid=2868 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130393039653566666532313839626239663136313763616631303561 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.975000 audit: BPF prog-id=121 op=LOAD Oct 2 19:54:59.975000 audit[2876]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c2588 items=0 ppid=2868 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130393039653566666532313839626239663136313763616631303561 Oct 2 19:54:59.977000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:54:59.977000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { perfmon } for pid=2876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit[2876]: AVC avc: denied { bpf } for pid=2876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:54:59.977000 audit: BPF prog-id=122 op=LOAD Oct 2 19:54:59.977000 audit[2876]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c2998 items=0 ppid=2868 pid=2876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:54:59.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130393039653566666532313839626239663136313763616631303561 Oct 2 19:55:00.007289 env[1634]: time="2023-10-02T19:55:00.006229623Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:55:00.007289 env[1634]: time="2023-10-02T19:55:00.006368942Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:55:00.007289 env[1634]: time="2023-10-02T19:55:00.006408145Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:55:00.007289 env[1634]: time="2023-10-02T19:55:00.006670544Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512 pid=2900 runtime=io.containerd.runc.v2 Oct 2 19:55:00.018608 env[1634]: time="2023-10-02T19:55:00.018552479Z" level=info msg="CreateContainer within sandbox \"afadfc71d74c3f474743b08373a520e454c4fe7c1a280f37ed233251c47ef4c9\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"165aed10a7662f1f405d66d37666bc8a374752f297823995876f91adfd86bbfe\"" Oct 2 19:55:00.021512 env[1634]: time="2023-10-02T19:55:00.021467196Z" level=info msg="StartContainer for \"165aed10a7662f1f405d66d37666bc8a374752f297823995876f91adfd86bbfe\"" Oct 2 19:55:00.076966 systemd[1]: Started cri-containerd-165aed10a7662f1f405d66d37666bc8a374752f297823995876f91adfd86bbfe.scope. Oct 2 19:55:00.085755 env[1634]: time="2023-10-02T19:55:00.085708000Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-7b6w5,Uid:62014256-7954-4659-a6be-c99f9f52189c,Namespace:kube-system,Attempt:0,} returns sandbox id \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\"" Oct 2 19:55:00.090482 env[1634]: time="2023-10-02T19:55:00.090440671Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:55:00.111318 systemd[1]: Started cri-containerd-0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512.scope. Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2824 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136356165643130613736363266316634303564363664333736363662 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit: BPF prog-id=123 op=LOAD Oct 2 19:55:00.127000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00031b380 items=0 ppid=2824 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136356165643130613736363266316634303564363664333736363662 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit: BPF prog-id=124 op=LOAD Oct 2 19:55:00.127000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00031b3c8 items=0 ppid=2824 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136356165643130613736363266316634303564363664333736363662 Oct 2 19:55:00.127000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:55:00.127000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { perfmon } for pid=2930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit[2930]: AVC avc: denied { bpf } for pid=2930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.127000 audit: BPF prog-id=125 op=LOAD Oct 2 19:55:00.127000 audit[2930]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00031b458 items=0 ppid=2824 pid=2930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.127000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136356165643130613736363266316634303564363664333736363662 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.130000 audit: BPF prog-id=126 op=LOAD Oct 2 19:55:00.142000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.142000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032353563636335616331623963613733636633326265386636356466 Oct 2 19:55:00.142000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.142000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032353563636335616331623963613733636633326265386636356466 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.143000 audit: BPF prog-id=127 op=LOAD Oct 2 19:55:00.143000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00029a7c0 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032353563636335616331623963613733636633326265386636356466 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.144000 audit: BPF prog-id=128 op=LOAD Oct 2 19:55:00.144000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00029a808 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032353563636335616331623963613733636633326265386636356466 Oct 2 19:55:00.144000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:55:00.144000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { perfmon } for pid=2915 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit[2915]: AVC avc: denied { bpf } for pid=2915 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:00.145000 audit: BPF prog-id=129 op=LOAD Oct 2 19:55:00.145000 audit[2915]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00029ac18 items=0 ppid=2900 pid=2915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032353563636335616331623963613733636633326265386636356466 Oct 2 19:55:00.183190 env[1634]: time="2023-10-02T19:55:00.183140927Z" level=info msg="StartContainer for \"165aed10a7662f1f405d66d37666bc8a374752f297823995876f91adfd86bbfe\" returns successfully" Oct 2 19:55:00.194976 env[1634]: time="2023-10-02T19:55:00.194927046Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-bpr8w,Uid:28948759-ed20-4a22-8986-6bf20a4f3d02,Namespace:kube-system,Attempt:0,} returns sandbox id \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\"" Oct 2 19:55:00.654000 audit[2995]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2995 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.654000 audit[2995]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8b17e040 a2=0 a3=7ffe8b17e02c items=0 ppid=2943 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.654000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:00.656000 audit[2997]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.656000 audit[2997]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc73481d50 a2=0 a3=7ffc73481d3c items=0 ppid=2943 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:55:00.658000 audit[2999]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.658000 audit[2999]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff0635b9b0 a2=0 a3=7fff0635b99c items=0 ppid=2943 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:00.662000 audit[3000]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.662000 audit[3000]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7ec82e20 a2=0 a3=7ffd7ec82e0c items=0 ppid=2943 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.662000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:55:00.664000 audit[3001]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=3001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.664000 audit[3001]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeb26f5910 a2=0 a3=7ffeb26f58fc items=0 ppid=2943 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.664000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:00.667000 audit[3002]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3002 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.667000 audit[3002]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe26398300 a2=0 a3=7ffe263982ec items=0 ppid=2943 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.667000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:55:00.763000 audit[3003]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.763000 audit[3003]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd7339e330 a2=0 a3=7ffd7339e31c items=0 ppid=2943 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:00.770000 audit[3005]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.770000 audit[3005]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffed04170a0 a2=0 a3=7ffed041708c items=0 ppid=2943 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:55:00.776000 audit[3008]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3008 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.776000 audit[3008]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdb8bf16f0 a2=0 a3=7ffdb8bf16dc items=0 ppid=2943 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.776000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:55:00.778000 audit[3009]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3009 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.778000 audit[3009]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd248e2c30 a2=0 a3=7ffd248e2c1c items=0 ppid=2943 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.778000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:00.792000 audit[3011]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3011 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.792000 audit[3011]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe03bdbc10 a2=0 a3=7ffe03bdbbfc items=0 ppid=2943 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.792000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:00.794000 audit[3012]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3012 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.794000 audit[3012]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1ad81510 a2=0 a3=7fff1ad814fc items=0 ppid=2943 pid=3012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.794000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:00.810000 audit[3014]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.810000 audit[3014]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffeaad43b10 a2=0 a3=7ffeaad43afc items=0 ppid=2943 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.810000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:00.830000 audit[3017]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3017 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.830000 audit[3017]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff9d72a5f0 a2=0 a3=7fff9d72a5dc items=0 ppid=2943 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.830000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:55:00.833000 audit[3018]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.833000 audit[3018]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd00cef3b0 a2=0 a3=7ffd00cef39c items=0 ppid=2943 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:00.837000 audit[3020]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.837000 audit[3020]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd8f02af50 a2=0 a3=7ffd8f02af3c items=0 ppid=2943 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:00.839000 audit[3021]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.839000 audit[3021]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd65c870d0 a2=0 a3=7ffd65c870bc items=0 ppid=2943 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.839000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:00.843000 audit[3023]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.843000 audit[3023]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd845fdb90 a2=0 a3=7ffd845fdb7c items=0 ppid=2943 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.843000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:00.849000 audit[3026]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3026 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.849000 audit[3026]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe840a74c0 a2=0 a3=7ffe840a74ac items=0 ppid=2943 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.849000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:00.858000 audit[3029]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3029 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.858000 audit[3029]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc0af33b50 a2=0 a3=7ffc0af33b3c items=0 ppid=2943 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.858000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:00.863000 audit[3030]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.863000 audit[3030]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffff58a7c0 a2=0 a3=7fffff58a7ac items=0 ppid=2943 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.863000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:00.868000 audit[3032]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3032 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.868000 audit[3032]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffedcdde5e0 a2=0 a3=7ffedcdde5cc items=0 ppid=2943 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.868000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:00.876000 audit[3035]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3035 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.876000 audit[3035]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd6dbeac70 a2=0 a3=7ffd6dbeac5c items=0 ppid=2943 pid=3035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.876000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:00.885000 audit[3040]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.885000 audit[3040]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeff3ed9a0 a2=0 a3=7ffeff3ed98c items=0 ppid=2943 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.885000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:55:00.890000 audit[3042]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:55:00.890000 audit[3042]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffc79a55c0 a2=0 a3=7fffc79a55ac items=0 ppid=2943 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.890000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:55:00.922000 audit[3044]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3044 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:00.922000 audit[3044]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fff27e67160 a2=0 a3=7fff27e6714c items=0 ppid=2943 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.922000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:00.932000 audit[3044]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3044 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:55:00.932000 audit[3044]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff27e67160 a2=0 a3=7fff27e6714c items=0 ppid=2943 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.932000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:00.934000 audit[3050]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3050 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.934000 audit[3050]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc4d056f10 a2=0 a3=7ffc4d056efc items=0 ppid=2943 pid=3050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.934000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:55:00.940000 audit[3052]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.940000 audit[3052]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc171b46b0 a2=0 a3=7ffc171b469c items=0 ppid=2943 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.940000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:55:00.946000 audit[3055]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.946000 audit[3055]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe0a62d260 a2=0 a3=7ffe0a62d24c items=0 ppid=2943 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.946000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:55:00.952000 audit[3056]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.952000 audit[3056]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda42c0f00 a2=0 a3=7ffda42c0eec items=0 ppid=2943 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.952000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:55:00.965000 audit[3058]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.965000 audit[3058]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd2d7901c0 a2=0 a3=7ffd2d7901ac items=0 ppid=2943 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.965000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:55:00.972000 audit[3059]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.972000 audit[3059]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe8dd36f70 a2=0 a3=7ffe8dd36f5c items=0 ppid=2943 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.972000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:55:00.978000 audit[3061]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3061 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:00.978000 audit[3061]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe06068980 a2=0 a3=7ffe0606896c items=0 ppid=2943 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:00.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:55:01.007000 audit[3064]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3064 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.007000 audit[3064]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffc97924190 a2=0 a3=7ffc9792417c items=0 ppid=2943 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.007000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:55:01.011000 audit[3065]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.011000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe035a09d0 a2=0 a3=7ffe035a09bc items=0 ppid=2943 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.011000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:55:01.017000 audit[3067]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.017000 audit[3067]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc7811c690 a2=0 a3=7ffc7811c67c items=0 ppid=2943 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.017000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:55:01.021000 audit[3068]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3068 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.021000 audit[3068]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc6f669900 a2=0 a3=7ffc6f6698ec items=0 ppid=2943 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.021000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:55:01.046000 audit[3070]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.046000 audit[3070]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd2e82e340 a2=0 a3=7ffd2e82e32c items=0 ppid=2943 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:55:01.055000 audit[3073]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.055000 audit[3073]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe28ee0810 a2=0 a3=7ffe28ee07fc items=0 ppid=2943 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:55:01.061000 audit[3076]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.061000 audit[3076]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc221f2a30 a2=0 a3=7ffc221f2a1c items=0 ppid=2943 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.061000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:55:01.066000 audit[3077]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3077 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.066000 audit[3077]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdf5002070 a2=0 a3=7ffdf500205c items=0 ppid=2943 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.066000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:55:01.089000 audit[3079]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.089000 audit[3079]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff646fac30 a2=0 a3=7fff646fac1c items=0 ppid=2943 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.089000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:01.116000 audit[3082]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3082 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.116000 audit[3082]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffdd922a350 a2=0 a3=7ffdd922a33c items=0 ppid=2943 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.116000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:55:01.119000 audit[3083]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3083 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.119000 audit[3083]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffe23a12b0 a2=0 a3=7fffe23a129c items=0 ppid=2943 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.119000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:55:01.127000 audit[3085]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3085 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.127000 audit[3085]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe41e751d0 a2=0 a3=7ffe41e751bc items=0 ppid=2943 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.127000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:01.139000 audit[3088]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.139000 audit[3088]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe0f06b100 a2=0 a3=7ffe0f06b0ec items=0 ppid=2943 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.139000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:55:01.142000 audit[3089]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3089 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.142000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc64325390 a2=0 a3=7ffc6432537c items=0 ppid=2943 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.142000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:55:01.149000 audit[3091]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3091 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:55:01.149000 audit[3091]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff7c5a9af0 a2=0 a3=7fff7c5a9adc items=0 ppid=2943 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.149000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:55:01.156000 audit[3093]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3093 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:01.156000 audit[3093]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc50994280 a2=0 a3=7ffc5099426c items=0 ppid=2943 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.156000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:01.158000 audit[3093]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3093 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:55:01.158000 audit[3093]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffc50994280 a2=0 a3=7ffc5099426c items=0 ppid=2943 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:01.158000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:55:07.752797 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1729832800.mount: Deactivated successfully. Oct 2 19:55:12.521281 env[1634]: time="2023-10-02T19:55:12.521213159Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:12.524206 env[1634]: time="2023-10-02T19:55:12.524150951Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:12.526908 env[1634]: time="2023-10-02T19:55:12.526851293Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:12.527745 env[1634]: time="2023-10-02T19:55:12.527707237Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:55:12.532501 env[1634]: time="2023-10-02T19:55:12.530711965Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:55:12.532677 env[1634]: time="2023-10-02T19:55:12.532523813Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:55:12.553944 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1003322793.mount: Deactivated successfully. Oct 2 19:55:12.572361 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1903640381.mount: Deactivated successfully. Oct 2 19:55:12.581917 env[1634]: time="2023-10-02T19:55:12.581836449Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\"" Oct 2 19:55:12.587420 env[1634]: time="2023-10-02T19:55:12.585970325Z" level=info msg="StartContainer for \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\"" Oct 2 19:55:12.618838 systemd[1]: Started cri-containerd-92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91.scope. Oct 2 19:55:12.643976 systemd[1]: cri-containerd-92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91.scope: Deactivated successfully. Oct 2 19:55:12.809775 env[1634]: time="2023-10-02T19:55:12.808744398Z" level=info msg="shim disconnected" id=92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91 Oct 2 19:55:12.809775 env[1634]: time="2023-10-02T19:55:12.808799975Z" level=warning msg="cleaning up after shim disconnected" id=92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91 namespace=k8s.io Oct 2 19:55:12.809775 env[1634]: time="2023-10-02T19:55:12.808812666Z" level=info msg="cleaning up dead shim" Oct 2 19:55:12.819597 env[1634]: time="2023-10-02T19:55:12.819547596Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3122 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:12Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:12.819982 env[1634]: time="2023-10-02T19:55:12.819833790Z" level=error msg="copy shim log" error="read /proc/self/fd/53: file already closed" Oct 2 19:55:12.820190 env[1634]: time="2023-10-02T19:55:12.820150008Z" level=error msg="Failed to pipe stderr of container \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\"" error="reading from a closed fifo" Oct 2 19:55:12.821429 env[1634]: time="2023-10-02T19:55:12.821373332Z" level=error msg="Failed to pipe stdout of container \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\"" error="reading from a closed fifo" Oct 2 19:55:12.823803 env[1634]: time="2023-10-02T19:55:12.823741860Z" level=error msg="StartContainer for \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:12.824240 kubelet[2747]: E1002 19:55:12.824213 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91" Oct 2 19:55:12.831608 kubelet[2747]: E1002 19:55:12.824683 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:12.831608 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:12.831608 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:55:12.831754 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rkbbf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:12.831754 kubelet[2747]: E1002 19:55:12.824768 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:13.075082 env[1634]: time="2023-10-02T19:55:13.074690403Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:55:13.101701 kubelet[2747]: I1002 19:55:13.101650 2747 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-5mgcd" podStartSLOduration=14.101551433 podCreationTimestamp="2023-10-02 19:54:59 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:55:00.995127567 +0000 UTC m=+16.519977492" watchObservedRunningTime="2023-10-02 19:55:13.101551433 +0000 UTC m=+28.626401341" Oct 2 19:55:13.101969 env[1634]: time="2023-10-02T19:55:13.101926659Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\"" Oct 2 19:55:13.103855 env[1634]: time="2023-10-02T19:55:13.103796586Z" level=info msg="StartContainer for \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\"" Oct 2 19:55:13.133693 systemd[1]: Started cri-containerd-d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400.scope. Oct 2 19:55:13.151463 systemd[1]: cri-containerd-d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400.scope: Deactivated successfully. Oct 2 19:55:13.183773 env[1634]: time="2023-10-02T19:55:13.183619066Z" level=info msg="shim disconnected" id=d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400 Oct 2 19:55:13.184070 env[1634]: time="2023-10-02T19:55:13.184034561Z" level=warning msg="cleaning up after shim disconnected" id=d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400 namespace=k8s.io Oct 2 19:55:13.184070 env[1634]: time="2023-10-02T19:55:13.184057678Z" level=info msg="cleaning up dead shim" Oct 2 19:55:13.195331 env[1634]: time="2023-10-02T19:55:13.195251359Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3159 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:13.195629 env[1634]: time="2023-10-02T19:55:13.195568136Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 19:55:13.198895 env[1634]: time="2023-10-02T19:55:13.198821118Z" level=error msg="Failed to pipe stderr of container \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\"" error="reading from a closed fifo" Oct 2 19:55:13.199129 env[1634]: time="2023-10-02T19:55:13.198898835Z" level=error msg="Failed to pipe stdout of container \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\"" error="reading from a closed fifo" Oct 2 19:55:13.201542 env[1634]: time="2023-10-02T19:55:13.201491447Z" level=error msg="StartContainer for \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:13.201804 kubelet[2747]: E1002 19:55:13.201771 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400" Oct 2 19:55:13.204155 kubelet[2747]: E1002 19:55:13.202252 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:13.204155 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:13.204155 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:55:13.204155 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rkbbf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:13.204155 kubelet[2747]: E1002 19:55:13.202365 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:13.449710 env[1634]: time="2023-10-02T19:55:13.449618553Z" level=error msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" failed" error="failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/ed/ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T195513Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=66bc1d6563b0ac824f9ba3a8f6191225c8d281b18e3708e4a897a8d334091fb8&cf_sign=ozyRh6qgnKtnrfELxXinVXGf8vTvEKD08eGR%2BDhP6%2FCvosD8z92JbEX0bQD0im%2Bu%2BwM1xxerXvfSGlrG5K0x55xVObvJY3sda3sUUk9uuRiq6RhZ51gwEolOU5O9wkmWa%2FJUcvg%2F95zcdxdKz%2FomGOETWTtwDjvDdPmrvH9cSMOP7XVMgq9PauufyfJ1jfgnKs1OuIObgNKfurAtcIpB0tpDjKp%2Fz0fm1H6CuGHNEqe3faBQS0QcPERj0Bdphbk8BdQZEisiYadrRuqilY8RSkBXuGTonOxs8s7Ye%2Fvmm4eXtASOfgPFOcdglocverJ0B1WBgyInb3VVvwb7PaOiEA%3D%3D&cf_expiry=1696277113®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" Oct 2 19:55:13.452283 kubelet[2747]: E1002 19:55:13.450583 2747 remote_image.go:167] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/ed/ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T195513Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=66bc1d6563b0ac824f9ba3a8f6191225c8d281b18e3708e4a897a8d334091fb8&cf_sign=ozyRh6qgnKtnrfELxXinVXGf8vTvEKD08eGR%2BDhP6%2FCvosD8z92JbEX0bQD0im%2Bu%2BwM1xxerXvfSGlrG5K0x55xVObvJY3sda3sUUk9uuRiq6RhZ51gwEolOU5O9wkmWa%2FJUcvg%2F95zcdxdKz%2FomGOETWTtwDjvDdPmrvH9cSMOP7XVMgq9PauufyfJ1jfgnKs1OuIObgNKfurAtcIpB0tpDjKp%2Fz0fm1H6CuGHNEqe3faBQS0QcPERj0Bdphbk8BdQZEisiYadrRuqilY8RSkBXuGTonOxs8s7Ye%2Fvmm4eXtASOfgPFOcdglocverJ0B1WBgyInb3VVvwb7PaOiEA%3D%3D&cf_expiry=1696277113®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:55:13.452283 kubelet[2747]: E1002 19:55:13.450668 2747 kuberuntime_image.go:53] "Failed to pull image" err="rpc error: code = Unknown desc = failed to pull and unpack image \"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://cdn03.quay.io/sha256/ed/ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T195513Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=66bc1d6563b0ac824f9ba3a8f6191225c8d281b18e3708e4a897a8d334091fb8&cf_sign=ozyRh6qgnKtnrfELxXinVXGf8vTvEKD08eGR%2BDhP6%2FCvosD8z92JbEX0bQD0im%2Bu%2BwM1xxerXvfSGlrG5K0x55xVObvJY3sda3sUUk9uuRiq6RhZ51gwEolOU5O9wkmWa%2FJUcvg%2F95zcdxdKz%2FomGOETWTtwDjvDdPmrvH9cSMOP7XVMgq9PauufyfJ1jfgnKs1OuIObgNKfurAtcIpB0tpDjKp%2Fz0fm1H6CuGHNEqe3faBQS0QcPERj0Bdphbk8BdQZEisiYadrRuqilY8RSkBXuGTonOxs8s7Ye%2Fvmm4eXtASOfgPFOcdglocverJ0B1WBgyInb3VVvwb7PaOiEA%3D%3D&cf_expiry=1696277113®ion=us-east-1\": dial tcp: lookup cdn03.quay.io: no such host" image="quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e" Oct 2 19:55:13.453393 kubelet[2747]: E1002 19:55:13.453057 2747 kuberuntime_manager.go:1212] container &Container{Name:cilium-operator,Image:quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Command:[cilium-operator-generic],Args:[--config-dir=/tmp/cilium/config-map --debug=$(CILIUM_DEBUG)],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:K8S_NODE_NAME,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:spec.nodeName,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_K8S_NAMESPACE,Value:,ValueFrom:&EnvVarSource{FieldRef:&ObjectFieldSelector{APIVersion:v1,FieldPath:metadata.namespace,},ResourceFieldRef:nil,ConfigMapKeyRef:nil,SecretKeyRef:nil,},},EnvVar{Name:CILIUM_DEBUG,Value:,ValueFrom:&EnvVarSource{FieldRef:nil,ResourceFieldRef:nil,ConfigMapKeyRef:&ConfigMapKeySelector{LocalObjectReference:LocalObjectReference{Name:cilium-config,},Key:debug,Optional:*true,},SecretKeyRef:nil,},},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:cilium-config-path,ReadOnly:true,MountPath:/tmp/cilium/config-map,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jr8tr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:nil,HTTPGet:&HTTPGetAction{Path:/healthz,Port:{0 9234 },Host:127.0.0.1,Scheme:HTTP,HTTPHeaders:[]HTTPHeader{},},TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:60,TimeoutSeconds:3,PeriodSeconds:10,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:nil,Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-operator-574c4bb98d-bpr8w_kube-system(28948759-ed20-4a22-8986-6bf20a4f3d02): ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e": failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://cdn03.quay.io/sha256/ed/ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T195513Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=66bc1d6563b0ac824f9ba3a8f6191225c8d281b18e3708e4a897a8d334091fb8&cf_sign=ozyRh6qgnKtnrfELxXinVXGf8vTvEKD08eGR%2BDhP6%2FCvosD8z92JbEX0bQD0im%2Bu%2BwM1xxerXvfSGlrG5K0x55xVObvJY3sda3sUUk9uuRiq6RhZ51gwEolOU5O9wkmWa%2FJUcvg%2F95zcdxdKz%2FomGOETWTtwDjvDdPmrvH9cSMOP7XVMgq9PauufyfJ1jfgnKs1OuIObgNKfurAtcIpB0tpDjKp%2Fz0fm1H6CuGHNEqe3faBQS0QcPERj0Bdphbk8BdQZEisiYadrRuqilY8RSkBXuGTonOxs8s7Ye%2Fvmm4eXtASOfgPFOcdglocverJ0B1WBgyInb3VVvwb7PaOiEA%3D%3D&cf_expiry=1696277113®ion=us-east-1": dial tcp: lookup cdn03.quay.io: no such host Oct 2 19:55:13.453393 kubelet[2747]: E1002 19:55:13.453135 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ErrImagePull: \"rpc error: code = Unknown desc = failed to pull and unpack image \\\"quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://cdn03.quay.io/sha256/ed/ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20231002%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20231002T195513Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=66bc1d6563b0ac824f9ba3a8f6191225c8d281b18e3708e4a897a8d334091fb8&cf_sign=ozyRh6qgnKtnrfELxXinVXGf8vTvEKD08eGR%2BDhP6%2FCvosD8z92JbEX0bQD0im%2Bu%2BwM1xxerXvfSGlrG5K0x55xVObvJY3sda3sUUk9uuRiq6RhZ51gwEolOU5O9wkmWa%2FJUcvg%2F95zcdxdKz%2FomGOETWTtwDjvDdPmrvH9cSMOP7XVMgq9PauufyfJ1jfgnKs1OuIObgNKfurAtcIpB0tpDjKp%2Fz0fm1H6CuGHNEqe3faBQS0QcPERj0Bdphbk8BdQZEisiYadrRuqilY8RSkBXuGTonOxs8s7Ye%2Fvmm4eXtASOfgPFOcdglocverJ0B1WBgyInb3VVvwb7PaOiEA%3D%3D&cf_expiry=1696277113®ion=us-east-1\\\": dial tcp: lookup cdn03.quay.io: no such host\"" pod="kube-system/cilium-operator-574c4bb98d-bpr8w" podUID=28948759-ed20-4a22-8986-6bf20a4f3d02 Oct 2 19:55:13.548803 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91-rootfs.mount: Deactivated successfully. Oct 2 19:55:14.078458 kubelet[2747]: I1002 19:55:14.078431 2747 scope.go:115] "RemoveContainer" containerID="92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91" Oct 2 19:55:14.079053 kubelet[2747]: I1002 19:55:14.079035 2747 scope.go:115] "RemoveContainer" containerID="92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91" Oct 2 19:55:14.079781 kubelet[2747]: E1002 19:55:14.079763 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"cilium-operator\" with ImagePullBackOff: \"Back-off pulling image \\\"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\\\"\"" pod="kube-system/cilium-operator-574c4bb98d-bpr8w" podUID=28948759-ed20-4a22-8986-6bf20a4f3d02 Oct 2 19:55:14.084257 env[1634]: time="2023-10-02T19:55:14.084217575Z" level=info msg="RemoveContainer for \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\"" Oct 2 19:55:14.085823 env[1634]: time="2023-10-02T19:55:14.085252658Z" level=info msg="RemoveContainer for \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\"" Oct 2 19:55:14.086652 env[1634]: time="2023-10-02T19:55:14.086619910Z" level=error msg="RemoveContainer for \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\" failed" error="failed to set removing state for container \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\": container is already in removing state" Oct 2 19:55:14.088241 kubelet[2747]: E1002 19:55:14.088227 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\": container is already in removing state" containerID="92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91" Oct 2 19:55:14.088390 kubelet[2747]: I1002 19:55:14.088382 2747 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91} err="rpc error: code = Unknown desc = failed to set removing state for container \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\": container is already in removing state" Oct 2 19:55:14.106977 env[1634]: time="2023-10-02T19:55:14.106912407Z" level=info msg="RemoveContainer for \"92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91\" returns successfully" Oct 2 19:55:14.108822 kubelet[2747]: E1002 19:55:14.108799 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:15.081291 kubelet[2747]: E1002 19:55:15.081250 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:15.914419 kubelet[2747]: W1002 19:55:15.914362 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice/cri-containerd-92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91.scope WatchSource:0}: container "92118b1eea59c3774a4f1cf2ed60b000765122dc962e427f2e03c7f90a84ed91" in namespace "k8s.io": not found Oct 2 19:55:19.025811 kubelet[2747]: W1002 19:55:19.025281 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice/cri-containerd-d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400.scope WatchSource:0}: task d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400 not found: not found Oct 2 19:55:24.860390 env[1634]: time="2023-10-02T19:55:24.860288409Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:55:26.229051 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1247785406.mount: Deactivated successfully. Oct 2 19:55:27.171487 env[1634]: time="2023-10-02T19:55:27.171438195Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:27.175324 env[1634]: time="2023-10-02T19:55:27.175277824Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:27.181397 env[1634]: time="2023-10-02T19:55:27.181332992Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:55:27.185430 env[1634]: time="2023-10-02T19:55:27.183642187Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:55:27.187806 env[1634]: time="2023-10-02T19:55:27.187760827Z" level=info msg="CreateContainer within sandbox \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:55:27.207676 env[1634]: time="2023-10-02T19:55:27.207587547Z" level=info msg="CreateContainer within sandbox \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\"" Oct 2 19:55:27.210368 env[1634]: time="2023-10-02T19:55:27.208729112Z" level=info msg="StartContainer for \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\"" Oct 2 19:55:27.247798 systemd[1]: Started cri-containerd-a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51.scope. Oct 2 19:55:27.280682 kernel: kauditd_printk_skb: 372 callbacks suppressed Oct 2 19:55:27.280845 kernel: audit: type=1400 audit(1696276527.271:1105): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.280889 kernel: audit: type=1400 audit(1696276527.271:1106): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.290644 kernel: audit: type=1400 audit(1696276527.271:1107): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.295671 kernel: audit: type=1400 audit(1696276527.271:1108): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.300859 kernel: audit: type=1400 audit(1696276527.271:1109): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.301448 kernel: audit: type=1400 audit(1696276527.271:1110): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.317108 kernel: audit: type=1400 audit(1696276527.271:1111): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.317446 kernel: audit: type=1400 audit(1696276527.271:1112): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.271000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.331825 kernel: audit: type=1400 audit(1696276527.271:1113): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.331958 kernel: audit: type=1400 audit(1696276527.284:1114): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.284000 audit: BPF prog-id=130 op=LOAD Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2900 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:27.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137666534646338346464356539336636643539306462316666363962 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2900 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:27.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137666534646338346464356539336636643539306462316666363962 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.285000 audit: BPF prog-id=131 op=LOAD Oct 2 19:55:27.285000 audit[3182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00033b3b0 items=0 ppid=2900 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:27.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137666534646338346464356539336636643539306462316666363962 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.289000 audit: BPF prog-id=132 op=LOAD Oct 2 19:55:27.289000 audit[3182]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00033b3f8 items=0 ppid=2900 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:27.289000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137666534646338346464356539336636643539306462316666363962 Oct 2 19:55:27.294000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:55:27.294000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { perfmon } for pid=3182 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit[3182]: AVC avc: denied { bpf } for pid=3182 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:55:27.294000 audit: BPF prog-id=133 op=LOAD Oct 2 19:55:27.294000 audit[3182]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00033b808 items=0 ppid=2900 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:27.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137666534646338346464356539336636643539306462316666363962 Oct 2 19:55:27.346854 env[1634]: time="2023-10-02T19:55:27.346806529Z" level=info msg="StartContainer for \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\" returns successfully" Oct 2 19:55:27.372000 audit[3194]: AVC avc: denied { map_create } for pid=3194 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c60,c246 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c60,c246 tclass=bpf permissive=0 Oct 2 19:55:27.372000 audit[3194]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006377d0 a2=48 a3=c0006377c0 items=0 ppid=2900 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c60,c246 key=(null) Oct 2 19:55:27.372000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:55:27.861000 env[1634]: time="2023-10-02T19:55:27.860946956Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:55:27.884944 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1545924129.mount: Deactivated successfully. Oct 2 19:55:27.885605 env[1634]: time="2023-10-02T19:55:27.885527322Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\"" Oct 2 19:55:27.886396 env[1634]: time="2023-10-02T19:55:27.886362491Z" level=info msg="StartContainer for \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\"" Oct 2 19:55:27.930498 systemd[1]: Started cri-containerd-4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118.scope. Oct 2 19:55:28.001980 systemd[1]: cri-containerd-4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118.scope: Deactivated successfully. Oct 2 19:55:28.037249 env[1634]: time="2023-10-02T19:55:28.037190429Z" level=info msg="shim disconnected" id=4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118 Oct 2 19:55:28.037629 env[1634]: time="2023-10-02T19:55:28.037599737Z" level=warning msg="cleaning up after shim disconnected" id=4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118 namespace=k8s.io Oct 2 19:55:28.037738 env[1634]: time="2023-10-02T19:55:28.037722624Z" level=info msg="cleaning up dead shim" Oct 2 19:55:28.068532 env[1634]: time="2023-10-02T19:55:28.068475345Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3237 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:28Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:28.069147 env[1634]: time="2023-10-02T19:55:28.069074224Z" level=error msg="copy shim log" error="read /proc/self/fd/101: file already closed" Oct 2 19:55:28.071805 env[1634]: time="2023-10-02T19:55:28.069346940Z" level=error msg="Failed to pipe stderr of container \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\"" error="reading from a closed fifo" Oct 2 19:55:28.072097 env[1634]: time="2023-10-02T19:55:28.071311315Z" level=error msg="Failed to pipe stdout of container \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\"" error="reading from a closed fifo" Oct 2 19:55:28.074143 env[1634]: time="2023-10-02T19:55:28.074082195Z" level=error msg="StartContainer for \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:28.074859 kubelet[2747]: E1002 19:55:28.074526 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118" Oct 2 19:55:28.074859 kubelet[2747]: E1002 19:55:28.074695 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:28.074859 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:28.074859 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:55:28.074859 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rkbbf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:28.074859 kubelet[2747]: E1002 19:55:28.074748 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:28.127291 kubelet[2747]: I1002 19:55:28.125640 2747 scope.go:115] "RemoveContainer" containerID="d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400" Oct 2 19:55:28.127986 kubelet[2747]: I1002 19:55:28.127968 2747 scope.go:115] "RemoveContainer" containerID="d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400" Oct 2 19:55:28.131345 env[1634]: time="2023-10-02T19:55:28.131291496Z" level=info msg="RemoveContainer for \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\"" Oct 2 19:55:28.132051 env[1634]: time="2023-10-02T19:55:28.131965133Z" level=info msg="RemoveContainer for \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\"" Oct 2 19:55:28.132164 env[1634]: time="2023-10-02T19:55:28.132119002Z" level=error msg="RemoveContainer for \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\" failed" error="failed to set removing state for container \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\": container is already in removing state" Oct 2 19:55:28.132358 kubelet[2747]: E1002 19:55:28.132338 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\": container is already in removing state" containerID="d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400" Oct 2 19:55:28.132489 kubelet[2747]: E1002 19:55:28.132478 2747 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400": container is already in removing state; Skipping pod "cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)" Oct 2 19:55:28.132984 kubelet[2747]: E1002 19:55:28.132967 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:28.138166 env[1634]: time="2023-10-02T19:55:28.138112271Z" level=info msg="RemoveContainer for \"d9b3039bc675169b36d61b4f3ca573c07a66fddb0a97c8c71088dc5e635ae400\" returns successfully" Oct 2 19:55:28.227808 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118-rootfs.mount: Deactivated successfully. Oct 2 19:55:28.492692 kubelet[2747]: I1002 19:55:28.492662 2747 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-bpr8w" podStartSLOduration=2.506843541 podCreationTimestamp="2023-10-02 19:54:59 +0000 UTC" firstStartedPulling="2023-10-02 19:55:00.196691511 +0000 UTC m=+15.721541418" lastFinishedPulling="2023-10-02 19:55:27.182457776 +0000 UTC m=+42.707307682" observedRunningTime="2023-10-02 19:55:28.318490533 +0000 UTC m=+43.843340456" watchObservedRunningTime="2023-10-02 19:55:28.492609805 +0000 UTC m=+44.017459752" Oct 2 19:55:31.147809 kubelet[2747]: W1002 19:55:31.147749 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice/cri-containerd-4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118.scope WatchSource:0}: task 4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118 not found: not found Oct 2 19:55:34.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.217:22-139.178.89.65:57584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:34.810840 systemd[1]: Started sshd@7-172.31.26.217:22-139.178.89.65:57584.service. Oct 2 19:55:34.813169 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 19:55:34.813281 kernel: audit: type=1130 audit(1696276534.809:1124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.217:22-139.178.89.65:57584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:35.054000 audit[3255]: USER_ACCT pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.056860 sshd[3255]: Accepted publickey for core from 139.178.89.65 port 57584 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:55:35.068000 audit[3255]: CRED_ACQ pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.074496 sshd[3255]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:55:35.080588 kernel: audit: type=1101 audit(1696276535.054:1125): pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.080725 kernel: audit: type=1103 audit(1696276535.068:1126): pid=3255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.085920 kernel: audit: type=1006 audit(1696276535.072:1127): pid=3255 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:55:35.072000 audit[3255]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd87dc38b0 a2=3 a3=0 items=0 ppid=1 pid=3255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.072000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:55:35.096368 systemd-logind[1629]: New session 8 of user core. Oct 2 19:55:35.099381 systemd[1]: Started session-8.scope. Oct 2 19:55:35.101203 kernel: audit: type=1300 audit(1696276535.072:1127): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd87dc38b0 a2=3 a3=0 items=0 ppid=1 pid=3255 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:35.101451 kernel: audit: type=1327 audit(1696276535.072:1127): proctitle=737368643A20636F7265205B707269765D Oct 2 19:55:35.115000 audit[3255]: USER_START pid=3255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.127308 kernel: audit: type=1105 audit(1696276535.115:1128): pid=3255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.127443 kernel: audit: type=1103 audit(1696276535.123:1129): pid=3257 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.123000 audit[3257]: CRED_ACQ pid=3257 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.614382 sshd[3255]: pam_unix(sshd:session): session closed for user core Oct 2 19:55:35.616000 audit[3255]: USER_END pid=3255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.617000 audit[3255]: CRED_DISP pid=3255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.630060 systemd[1]: sshd@7-172.31.26.217:22-139.178.89.65:57584.service: Deactivated successfully. Oct 2 19:55:35.631176 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:55:35.633279 systemd-logind[1629]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:55:35.635800 kernel: audit: type=1106 audit(1696276535.616:1130): pid=3255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.635888 kernel: audit: type=1104 audit(1696276535.617:1131): pid=3255 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:35.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.26.217:22-139.178.89.65:57584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:35.636157 systemd-logind[1629]: Removed session 8. Oct 2 19:55:39.646000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.646000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:39.646000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0025e0f80 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:55:39.646000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:39.646000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00263c6f0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:55:39.646000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:41.251359 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:55:41.251584 kernel: audit: type=1400 audit(1696276541.243:1135): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.243000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.243000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c009885e30 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.259775 kernel: audit: type=1300 audit(1696276541.243:1135): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c009885e30 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.259973 kernel: audit: type=1327 audit(1696276541.243:1135): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.243000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.243000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.272178 kernel: audit: type=1400 audit(1696276541.243:1136): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.272312 kernel: audit: type=1300 audit(1696276541.243:1136): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c009c23720 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.243000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c009c23720 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.243000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.285522 kernel: audit: type=1327 audit(1696276541.243:1136): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.285692 kernel: audit: type=1400 audit(1696276541.243:1137): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.243000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.243000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c009822030 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.243000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.306155 kernel: audit: type=1300 audit(1696276541.243:1137): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c009822030 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.306302 kernel: audit: type=1327 audit(1696276541.243:1137): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.306389 kernel: audit: type=1400 audit(1696276541.258:1138): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.258000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.258000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00972cfc0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.265000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.265000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c009c23760 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.265000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.265000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:41.265000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0098220c0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:55:41.265000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:55:41.856943 kubelet[2747]: E1002 19:55:41.856917 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:45.642471 systemd[1]: Started sshd@8-172.31.26.217:22-139.178.89.65:40032.service. Oct 2 19:55:45.641000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.217:22-139.178.89.65:40032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:45.825000 audit[3270]: USER_ACCT pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:45.826992 sshd[3270]: Accepted publickey for core from 139.178.89.65 port 40032 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:55:45.826000 audit[3270]: CRED_ACQ pid=3270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:45.827000 audit[3270]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbce6ff80 a2=3 a3=0 items=0 ppid=1 pid=3270 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:45.827000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:55:45.828737 sshd[3270]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:55:45.838654 systemd[1]: Started session-9.scope. Oct 2 19:55:45.839204 systemd-logind[1629]: New session 9 of user core. Oct 2 19:55:45.895000 audit[3270]: USER_START pid=3270 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:45.897000 audit[3272]: CRED_ACQ pid=3272 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:46.084021 sshd[3270]: pam_unix(sshd:session): session closed for user core Oct 2 19:55:46.085000 audit[3270]: USER_END pid=3270 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:46.085000 audit[3270]: CRED_DISP pid=3270 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:46.087928 systemd-logind[1629]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:55:46.088285 systemd[1]: sshd@8-172.31.26.217:22-139.178.89.65:40032.service: Deactivated successfully. Oct 2 19:55:46.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.26.217:22-139.178.89.65:40032 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:46.089231 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:55:46.090447 systemd-logind[1629]: Removed session 9. Oct 2 19:55:52.875071 env[1634]: time="2023-10-02T19:55:52.874507521Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:55:52.893452 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4087298887.mount: Deactivated successfully. Oct 2 19:55:52.905684 env[1634]: time="2023-10-02T19:55:52.905635059Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\"" Oct 2 19:55:52.906543 env[1634]: time="2023-10-02T19:55:52.906508224Z" level=info msg="StartContainer for \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\"" Oct 2 19:55:52.953985 systemd[1]: Started cri-containerd-d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410.scope. Oct 2 19:55:52.971248 systemd[1]: cri-containerd-d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410.scope: Deactivated successfully. Oct 2 19:55:53.008098 env[1634]: time="2023-10-02T19:55:53.008030088Z" level=info msg="shim disconnected" id=d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410 Oct 2 19:55:53.008098 env[1634]: time="2023-10-02T19:55:53.008099404Z" level=warning msg="cleaning up after shim disconnected" id=d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410 namespace=k8s.io Oct 2 19:55:53.008098 env[1634]: time="2023-10-02T19:55:53.008112521Z" level=info msg="cleaning up dead shim" Oct 2 19:55:53.024624 env[1634]: time="2023-10-02T19:55:53.024377237Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:55:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3306 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:55:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:55:53.025638 env[1634]: time="2023-10-02T19:55:53.025557724Z" level=error msg="copy shim log" error="read /proc/self/fd/46: file already closed" Oct 2 19:55:53.025869 env[1634]: time="2023-10-02T19:55:53.025824554Z" level=error msg="Failed to pipe stdout of container \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\"" error="reading from a closed fifo" Oct 2 19:55:53.026039 env[1634]: time="2023-10-02T19:55:53.025985739Z" level=error msg="Failed to pipe stderr of container \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\"" error="reading from a closed fifo" Oct 2 19:55:53.028712 env[1634]: time="2023-10-02T19:55:53.028655841Z" level=error msg="StartContainer for \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:55:53.028981 kubelet[2747]: E1002 19:55:53.028945 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410" Oct 2 19:55:53.029432 kubelet[2747]: E1002 19:55:53.029084 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:55:53.029432 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:55:53.029432 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:55:53.029432 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rkbbf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:55:53.029432 kubelet[2747]: E1002 19:55:53.029140 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:53.209295 kubelet[2747]: I1002 19:55:53.209164 2747 scope.go:115] "RemoveContainer" containerID="4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118" Oct 2 19:55:53.209817 kubelet[2747]: I1002 19:55:53.209599 2747 scope.go:115] "RemoveContainer" containerID="4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118" Oct 2 19:55:53.211921 env[1634]: time="2023-10-02T19:55:53.211878650Z" level=info msg="RemoveContainer for \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\"" Oct 2 19:55:53.214102 env[1634]: time="2023-10-02T19:55:53.214060781Z" level=info msg="RemoveContainer for \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\"" Oct 2 19:55:53.214352 env[1634]: time="2023-10-02T19:55:53.214173471Z" level=error msg="RemoveContainer for \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\" failed" error="failed to set removing state for container \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\": container is already in removing state" Oct 2 19:55:53.215146 kubelet[2747]: E1002 19:55:53.214769 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\": container is already in removing state" containerID="4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118" Oct 2 19:55:53.215146 kubelet[2747]: E1002 19:55:53.214816 2747 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118": container is already in removing state; Skipping pod "cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)" Oct 2 19:55:53.215855 kubelet[2747]: E1002 19:55:53.215808 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:55:53.217621 env[1634]: time="2023-10-02T19:55:53.217571150Z" level=info msg="RemoveContainer for \"4c5c5d603bc45828ebb48f69a6a419037ef6f0d946c7bbe3938363f647767118\" returns successfully" Oct 2 19:55:53.889254 systemd[1]: run-containerd-runc-k8s.io-d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410-runc.FoyF8l.mount: Deactivated successfully. Oct 2 19:55:53.889484 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410-rootfs.mount: Deactivated successfully. Oct 2 19:55:56.111120 kubelet[2747]: W1002 19:55:56.110984 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice/cri-containerd-d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410.scope WatchSource:0}: task d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410 not found: not found Oct 2 19:55:56.118229 kernel: kauditd_printk_skb: 19 callbacks suppressed Oct 2 19:55:56.118669 kernel: audit: type=1130 audit(1696276556.114:1150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.217:22-139.178.89.65:34196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:56.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.217:22-139.178.89.65:34196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:56.115722 systemd[1]: Started sshd@9-172.31.26.217:22-139.178.89.65:34196.service. Oct 2 19:55:56.317569 kernel: audit: type=1101 audit(1696276556.307:1151): pid=3319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.318865 kernel: audit: type=1103 audit(1696276556.316:1152): pid=3319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.307000 audit[3319]: USER_ACCT pid=3319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.316000 audit[3319]: CRED_ACQ pid=3319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.319155 sshd[3319]: Accepted publickey for core from 139.178.89.65 port 34196 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:55:56.318336 sshd[3319]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:55:56.330102 systemd[1]: Started session-10.scope. Oct 2 19:55:56.333598 kernel: audit: type=1006 audit(1696276556.316:1153): pid=3319 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:55:56.333785 kernel: audit: type=1300 audit(1696276556.316:1153): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccce7a4e0 a2=3 a3=0 items=0 ppid=1 pid=3319 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:56.316000 audit[3319]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccce7a4e0 a2=3 a3=0 items=0 ppid=1 pid=3319 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:55:56.332723 systemd-logind[1629]: New session 10 of user core. Oct 2 19:55:56.316000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:55:56.348162 kernel: audit: type=1327 audit(1696276556.316:1153): proctitle=737368643A20636F7265205B707269765D Oct 2 19:55:56.347000 audit[3319]: USER_START pid=3319 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.359541 kernel: audit: type=1105 audit(1696276556.347:1154): pid=3319 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.359704 kernel: audit: type=1103 audit(1696276556.347:1155): pid=3321 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.347000 audit[3321]: CRED_ACQ pid=3321 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.602890 sshd[3319]: pam_unix(sshd:session): session closed for user core Oct 2 19:55:56.603000 audit[3319]: USER_END pid=3319 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.608022 systemd[1]: sshd@9-172.31.26.217:22-139.178.89.65:34196.service: Deactivated successfully. Oct 2 19:55:56.609344 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:55:56.611049 systemd-logind[1629]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:55:56.612217 systemd-logind[1629]: Removed session 10. Oct 2 19:55:56.603000 audit[3319]: CRED_DISP pid=3319 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.619398 kernel: audit: type=1106 audit(1696276556.603:1156): pid=3319 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.619718 kernel: audit: type=1104 audit(1696276556.603:1157): pid=3319 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:55:56.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.26.217:22-139.178.89.65:34196 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:55:58.340000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.340000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.340000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027293c0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:55:58.340000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001efebe0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:55:58.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:58.340000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.340000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001efec00 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:55:58.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:58.340000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:55:58.343000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:55:58.343000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0027294e0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:55:58.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:05.856956 kubelet[2747]: E1002 19:56:05.856922 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:56:06.641331 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:56:06.641466 kernel: audit: type=1130 audit(1696276566.629:1163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.26.217:22-139.178.89.65:56152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:06.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.26.217:22-139.178.89.65:56152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:06.630784 systemd[1]: Started sshd@10-172.31.26.217:22-139.178.89.65:56152.service. Oct 2 19:56:06.804000 audit[3334]: USER_ACCT pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:06.806524 sshd[3334]: Accepted publickey for core from 139.178.89.65 port 56152 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:06.812294 kernel: audit: type=1101 audit(1696276566.804:1164): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:06.811000 audit[3334]: CRED_ACQ pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:06.813073 sshd[3334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:06.820657 systemd[1]: Started session-11.scope. Oct 2 19:56:06.822221 kernel: audit: type=1103 audit(1696276566.811:1165): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:06.822346 kernel: audit: type=1006 audit(1696276566.811:1166): pid=3334 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 19:56:06.822385 kernel: audit: type=1300 audit(1696276566.811:1166): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec795cd80 a2=3 a3=0 items=0 ppid=1 pid=3334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:06.811000 audit[3334]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec795cd80 a2=3 a3=0 items=0 ppid=1 pid=3334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:06.822739 systemd-logind[1629]: New session 11 of user core. Oct 2 19:56:06.811000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:06.832169 kernel: audit: type=1327 audit(1696276566.811:1166): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:06.832000 audit[3334]: USER_START pid=3334 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:06.832000 audit[3336]: CRED_ACQ pid=3336 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:06.846566 kernel: audit: type=1105 audit(1696276566.832:1167): pid=3334 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:06.846837 kernel: audit: type=1103 audit(1696276566.832:1168): pid=3336 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.025095 sshd[3334]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:07.025000 audit[3334]: USER_END pid=3334 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.029362 systemd[1]: sshd@10-172.31.26.217:22-139.178.89.65:56152.service: Deactivated successfully. Oct 2 19:56:07.030366 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:56:07.032645 systemd-logind[1629]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:56:07.033966 systemd-logind[1629]: Removed session 11. Oct 2 19:56:07.026000 audit[3334]: CRED_DISP pid=3334 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.040979 kernel: audit: type=1106 audit(1696276567.025:1169): pid=3334 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.041106 kernel: audit: type=1104 audit(1696276567.026:1170): pid=3334 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:07.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.26.217:22-139.178.89.65:56152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:17.066218 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:17.066380 kernel: audit: type=1130 audit(1696276577.052:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.26.217:22-139.178.89.65:56334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:17.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.26.217:22-139.178.89.65:56334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:17.053877 systemd[1]: Started sshd@11-172.31.26.217:22-139.178.89.65:56334.service. Oct 2 19:56:17.243238 kernel: audit: type=1101 audit(1696276577.231:1173): pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.243356 kernel: audit: type=1103 audit(1696276577.239:1174): pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.231000 audit[3349]: USER_ACCT pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.239000 audit[3349]: CRED_ACQ pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.242451 sshd[3349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:17.244146 sshd[3349]: Accepted publickey for core from 139.178.89.65 port 56334 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:17.250302 kernel: audit: type=1006 audit(1696276577.239:1175): pid=3349 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:56:17.239000 audit[3349]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd73194a30 a2=3 a3=0 items=0 ppid=1 pid=3349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:17.268917 systemd[1]: Started session-12.scope. Oct 2 19:56:17.271336 kernel: audit: type=1300 audit(1696276577.239:1175): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd73194a30 a2=3 a3=0 items=0 ppid=1 pid=3349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:17.271547 systemd-logind[1629]: New session 12 of user core. Oct 2 19:56:17.239000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:17.275142 kernel: audit: type=1327 audit(1696276577.239:1175): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:17.281000 audit[3349]: USER_START pid=3349 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.297624 kernel: audit: type=1105 audit(1696276577.281:1176): pid=3349 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.298000 audit[3351]: CRED_ACQ pid=3351 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.313339 kernel: audit: type=1103 audit(1696276577.298:1177): pid=3351 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.511138 sshd[3349]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:17.511000 audit[3349]: USER_END pid=3349 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.523420 kernel: audit: type=1106 audit(1696276577.511:1178): pid=3349 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.518056 systemd-logind[1629]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:56:17.520882 systemd[1]: sshd@11-172.31.26.217:22-139.178.89.65:56334.service: Deactivated successfully. Oct 2 19:56:17.522129 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:56:17.511000 audit[3349]: CRED_DISP pid=3349 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:17.524128 systemd-logind[1629]: Removed session 12. Oct 2 19:56:17.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.26.217:22-139.178.89.65:56334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:17.535312 kernel: audit: type=1104 audit(1696276577.511:1179): pid=3349 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:19.861089 kubelet[2747]: E1002 19:56:19.861056 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:56:27.552061 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:27.552361 kernel: audit: type=1130 audit(1696276587.538:1181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.217:22-139.178.89.65:55184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:27.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.217:22-139.178.89.65:55184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:27.539141 systemd[1]: Started sshd@12-172.31.26.217:22-139.178.89.65:55184.service. Oct 2 19:56:27.716000 audit[3362]: USER_ACCT pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.726611 sshd[3362]: Accepted publickey for core from 139.178.89.65 port 55184 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:27.725000 audit[3362]: CRED_ACQ pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.727673 sshd[3362]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:27.734188 kernel: audit: type=1101 audit(1696276587.716:1182): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.734329 kernel: audit: type=1103 audit(1696276587.725:1183): pid=3362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.734542 kernel: audit: type=1006 audit(1696276587.725:1184): pid=3362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:56:27.725000 audit[3362]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd194bf200 a2=3 a3=0 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:27.747287 kernel: audit: type=1300 audit(1696276587.725:1184): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd194bf200 a2=3 a3=0 items=0 ppid=1 pid=3362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:27.747403 kernel: audit: type=1327 audit(1696276587.725:1184): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:27.725000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:27.749526 systemd[1]: Started session-13.scope. Oct 2 19:56:27.751670 systemd-logind[1629]: New session 13 of user core. Oct 2 19:56:27.760000 audit[3362]: USER_START pid=3362 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.771302 kernel: audit: type=1105 audit(1696276587.760:1185): pid=3362 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.771000 audit[3364]: CRED_ACQ pid=3364 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.780476 kernel: audit: type=1103 audit(1696276587.771:1186): pid=3364 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:27.995622 sshd[3362]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:27.997000 audit[3362]: USER_END pid=3362 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.007286 kernel: audit: type=1106 audit(1696276587.997:1187): pid=3362 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.008554 systemd[1]: sshd@12-172.31.26.217:22-139.178.89.65:55184.service: Deactivated successfully. Oct 2 19:56:28.009604 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:56:27.999000 audit[3362]: CRED_DISP pid=3362 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.014542 systemd-logind[1629]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:56:28.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.26.217:22-139.178.89.65:55184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:28.020355 kernel: audit: type=1104 audit(1696276587.999:1188): pid=3362 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:28.021113 systemd-logind[1629]: Removed session 13. Oct 2 19:56:32.857550 kubelet[2747]: E1002 19:56:32.857515 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:56:38.026757 systemd[1]: Started sshd@13-172.31.26.217:22-139.178.89.65:59574.service. Oct 2 19:56:38.035750 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:38.035876 kernel: audit: type=1130 audit(1696276598.027:1190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.217:22-139.178.89.65:59574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:38.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.217:22-139.178.89.65:59574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:38.218824 kernel: audit: type=1101 audit(1696276598.204:1191): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.204000 audit[3376]: USER_ACCT pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.219949 sshd[3376]: Accepted publickey for core from 139.178.89.65 port 59574 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:38.219000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.220702 sshd[3376]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:38.241388 kernel: audit: type=1103 audit(1696276598.219:1192): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.219000 audit[3376]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe46698160 a2=3 a3=0 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:38.259157 systemd[1]: Started session-14.scope. Oct 2 19:56:38.268762 kernel: audit: type=1006 audit(1696276598.219:1193): pid=3376 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:56:38.268912 kernel: audit: type=1300 audit(1696276598.219:1193): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe46698160 a2=3 a3=0 items=0 ppid=1 pid=3376 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:38.268947 kernel: audit: type=1327 audit(1696276598.219:1193): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:38.219000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:38.266362 systemd-logind[1629]: New session 14 of user core. Oct 2 19:56:38.282000 audit[3376]: USER_START pid=3376 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.296297 kernel: audit: type=1105 audit(1696276598.282:1194): pid=3376 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.296000 audit[3378]: CRED_ACQ pid=3378 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.305298 kernel: audit: type=1103 audit(1696276598.296:1195): pid=3378 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.535171 sshd[3376]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:38.537000 audit[3376]: USER_END pid=3376 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.541292 systemd[1]: sshd@13-172.31.26.217:22-139.178.89.65:59574.service: Deactivated successfully. Oct 2 19:56:38.542468 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:56:38.549288 kernel: audit: type=1106 audit(1696276598.537:1196): pid=3376 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.549675 systemd-logind[1629]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:56:38.537000 audit[3376]: CRED_DISP pid=3376 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:38.551697 systemd-logind[1629]: Removed session 14. Oct 2 19:56:38.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.26.217:22-139.178.89.65:59574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:38.562604 kernel: audit: type=1104 audit(1696276598.537:1197): pid=3376 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:39.648000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:39.648000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:39.648000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000895290 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:39.648000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:39.648000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e63380 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:39.648000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:41.245000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:41.245000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:41.245000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00a17ede0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:56:41.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:56:41.245000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003af5da0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:56:41.245000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:56:41.246000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:41.246000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003cfae40 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:56:41.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:56:41.262000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:41.262000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003e761b0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:56:41.262000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:56:41.270000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:41.270000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a0d39c0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:56:41.270000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:56:41.270000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:41.270000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003e76660 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:56:41.270000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:56:43.860707 env[1634]: time="2023-10-02T19:56:43.860647589Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:56:43.878600 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1304045550.mount: Deactivated successfully. Oct 2 19:56:43.889344 env[1634]: time="2023-10-02T19:56:43.889292797Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\"" Oct 2 19:56:43.891896 env[1634]: time="2023-10-02T19:56:43.890197715Z" level=info msg="StartContainer for \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\"" Oct 2 19:56:43.932362 systemd[1]: Started cri-containerd-f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef.scope. Oct 2 19:56:43.951143 systemd[1]: cri-containerd-f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef.scope: Deactivated successfully. Oct 2 19:56:43.978647 env[1634]: time="2023-10-02T19:56:43.978343984Z" level=info msg="shim disconnected" id=f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef Oct 2 19:56:43.978910 env[1634]: time="2023-10-02T19:56:43.978878484Z" level=warning msg="cleaning up after shim disconnected" id=f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef namespace=k8s.io Oct 2 19:56:43.978910 env[1634]: time="2023-10-02T19:56:43.978900332Z" level=info msg="cleaning up dead shim" Oct 2 19:56:44.004488 env[1634]: time="2023-10-02T19:56:43.999741093Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:56:43Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3412 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:56:43Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:56:44.004488 env[1634]: time="2023-10-02T19:56:44.000053402Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:56:44.004488 env[1634]: time="2023-10-02T19:56:44.003386929Z" level=error msg="Failed to pipe stdout of container \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\"" error="reading from a closed fifo" Oct 2 19:56:44.008223 env[1634]: time="2023-10-02T19:56:44.006017111Z" level=error msg="Failed to pipe stderr of container \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\"" error="reading from a closed fifo" Oct 2 19:56:44.010709 env[1634]: time="2023-10-02T19:56:44.010503179Z" level=error msg="StartContainer for \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:56:44.011164 kubelet[2747]: E1002 19:56:44.011115 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef" Oct 2 19:56:44.011760 kubelet[2747]: E1002 19:56:44.011297 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:56:44.011760 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:56:44.011760 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:56:44.011760 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rkbbf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:56:44.011760 kubelet[2747]: E1002 19:56:44.011403 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:56:44.411488 kubelet[2747]: I1002 19:56:44.411446 2747 scope.go:115] "RemoveContainer" containerID="d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410" Oct 2 19:56:44.414009 kubelet[2747]: I1002 19:56:44.413238 2747 scope.go:115] "RemoveContainer" containerID="d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410" Oct 2 19:56:44.417900 env[1634]: time="2023-10-02T19:56:44.417840307Z" level=info msg="RemoveContainer for \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\"" Oct 2 19:56:44.420809 env[1634]: time="2023-10-02T19:56:44.420772372Z" level=info msg="RemoveContainer for \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\"" Oct 2 19:56:44.421329 env[1634]: time="2023-10-02T19:56:44.421251657Z" level=error msg="RemoveContainer for \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\" failed" error="failed to set removing state for container \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\": container is already in removing state" Oct 2 19:56:44.421827 kubelet[2747]: E1002 19:56:44.421807 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\": container is already in removing state" containerID="d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410" Oct 2 19:56:44.421971 kubelet[2747]: E1002 19:56:44.421960 2747 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410": container is already in removing state; Skipping pod "cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)" Oct 2 19:56:44.422574 kubelet[2747]: E1002 19:56:44.422556 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:56:44.424744 env[1634]: time="2023-10-02T19:56:44.424699729Z" level=info msg="RemoveContainer for \"d7cdf8fb375e7e4fa6059f8b9da548a002d648fc035e7c80d5e36e3820edb410\" returns successfully" Oct 2 19:56:44.710720 kubelet[2747]: E1002 19:56:44.710672 2747 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:56:44.871495 systemd[1]: run-containerd-runc-k8s.io-f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef-runc.CSVbN4.mount: Deactivated successfully. Oct 2 19:56:44.871624 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef-rootfs.mount: Deactivated successfully. Oct 2 19:56:45.019454 kubelet[2747]: E1002 19:56:45.019177 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:47.084439 kubelet[2747]: W1002 19:56:47.084358 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice/cri-containerd-f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef.scope WatchSource:0}: task f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef not found: not found Oct 2 19:56:48.570012 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:56:48.570210 kernel: audit: type=1130 audit(1696276608.567:1207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.26.217:22-139.178.89.65:58810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:48.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.26.217:22-139.178.89.65:58810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:48.567840 systemd[1]: Started sshd@14-172.31.26.217:22-139.178.89.65:58810.service. Oct 2 19:56:48.766000 audit[3428]: USER_ACCT pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:48.767578 sshd[3428]: Accepted publickey for core from 139.178.89.65 port 58810 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:48.778919 kernel: audit: type=1101 audit(1696276608.766:1208): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:48.786000 audit[3428]: CRED_ACQ pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:48.788132 sshd[3428]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:48.813125 kernel: audit: type=1103 audit(1696276608.786:1209): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:48.813305 kernel: audit: type=1006 audit(1696276608.787:1210): pid=3428 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 19:56:48.813344 kernel: audit: type=1300 audit(1696276608.787:1210): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc44fdb5e0 a2=3 a3=0 items=0 ppid=1 pid=3428 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:48.787000 audit[3428]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc44fdb5e0 a2=3 a3=0 items=0 ppid=1 pid=3428 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:48.823283 systemd[1]: Started session-15.scope. Oct 2 19:56:48.831843 systemd-logind[1629]: New session 15 of user core. Oct 2 19:56:48.787000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:48.842348 kernel: audit: type=1327 audit(1696276608.787:1210): proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:48.853000 audit[3428]: USER_START pid=3428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:48.861909 kernel: audit: type=1105 audit(1696276608.853:1211): pid=3428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:48.860000 audit[3430]: CRED_ACQ pid=3430 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:48.871314 kernel: audit: type=1103 audit(1696276608.860:1212): pid=3430 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.098142 sshd[3428]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:49.101000 audit[3428]: USER_END pid=3428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.101000 audit[3428]: CRED_DISP pid=3428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.111976 systemd[1]: sshd@14-172.31.26.217:22-139.178.89.65:58810.service: Deactivated successfully. Oct 2 19:56:49.113404 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:56:49.115483 systemd-logind[1629]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:56:49.117446 kernel: audit: type=1106 audit(1696276609.101:1213): pid=3428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.117524 kernel: audit: type=1104 audit(1696276609.101:1214): pid=3428 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:49.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.26.217:22-139.178.89.65:58810 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:49.117781 systemd-logind[1629]: Removed session 15. Oct 2 19:56:50.021006 kubelet[2747]: E1002 19:56:50.020973 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:55.022046 kubelet[2747]: E1002 19:56:55.021962 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:56:56.857731 kubelet[2747]: E1002 19:56:56.857697 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:56:58.345069 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:56:58.345218 kernel: audit: type=1400 audit(1696276618.342:1216): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.342000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.342000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.366419 kernel: audit: type=1400 audit(1696276618.342:1217): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.366714 kernel: audit: type=1300 audit(1696276618.342:1217): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f0e500 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:58.342000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f0e500 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:58.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:58.377295 kernel: audit: type=1327 audit(1696276618.342:1217): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:58.342000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.402695 kernel: audit: type=1400 audit(1696276618.342:1218): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.403251 kernel: audit: type=1300 audit(1696276618.342:1218): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f0e620 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:58.342000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f0e620 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:58.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:58.424880 kernel: audit: type=1327 audit(1696276618.342:1218): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:58.425345 kernel: audit: type=1300 audit(1696276618.342:1216): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c15760 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:58.342000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c15760 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:58.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:58.456771 kernel: audit: type=1327 audit(1696276618.342:1216): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:58.456923 kernel: audit: type=1400 audit(1696276618.343:1219): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.343000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:56:58.343000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f0e860 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:56:58.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:56:59.129524 systemd[1]: Started sshd@15-172.31.26.217:22-139.178.89.65:34786.service. Oct 2 19:56:59.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.26.217:22-139.178.89.65:34786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:59.306000 audit[3440]: USER_ACCT pid=3440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.307236 sshd[3440]: Accepted publickey for core from 139.178.89.65 port 34786 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:56:59.308000 audit[3440]: CRED_ACQ pid=3440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.308000 audit[3440]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdee172f60 a2=3 a3=0 items=0 ppid=1 pid=3440 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:56:59.308000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:56:59.309091 sshd[3440]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:56:59.316851 systemd[1]: Started session-16.scope. Oct 2 19:56:59.317373 systemd-logind[1629]: New session 16 of user core. Oct 2 19:56:59.323000 audit[3440]: USER_START pid=3440 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.325000 audit[3442]: CRED_ACQ pid=3442 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.556896 sshd[3440]: pam_unix(sshd:session): session closed for user core Oct 2 19:56:59.558000 audit[3440]: USER_END pid=3440 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.558000 audit[3440]: CRED_DISP pid=3440 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:56:59.562408 systemd[1]: sshd@15-172.31.26.217:22-139.178.89.65:34786.service: Deactivated successfully. Oct 2 19:56:59.563339 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:56:59.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.26.217:22-139.178.89.65:34786 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:56:59.566607 systemd-logind[1629]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:56:59.568235 systemd-logind[1629]: Removed session 16. Oct 2 19:57:00.023809 kubelet[2747]: E1002 19:57:00.023774 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:05.025620 kubelet[2747]: E1002 19:57:05.025582 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:09.587236 systemd[1]: Started sshd@16-172.31.26.217:22-139.178.89.65:57432.service. Oct 2 19:57:09.600380 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:57:09.600510 kernel: audit: type=1130 audit(1696276629.587:1229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.26.217:22-139.178.89.65:57432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:09.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.26.217:22-139.178.89.65:57432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:09.770000 audit[3455]: USER_ACCT pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.778422 kernel: audit: type=1101 audit(1696276629.770:1230): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.778494 sshd[3455]: Accepted publickey for core from 139.178.89.65 port 57432 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:09.777000 audit[3455]: CRED_ACQ pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.779079 sshd[3455]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:09.788340 kernel: audit: type=1103 audit(1696276629.777:1231): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.788440 kernel: audit: type=1006 audit(1696276629.777:1232): pid=3455 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:57:09.788514 kernel: audit: type=1300 audit(1696276629.777:1232): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc2342c0 a2=3 a3=0 items=0 ppid=1 pid=3455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:09.777000 audit[3455]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc2342c0 a2=3 a3=0 items=0 ppid=1 pid=3455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:09.794080 systemd[1]: Started session-17.scope. Oct 2 19:57:09.777000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:09.796567 systemd-logind[1629]: New session 17 of user core. Oct 2 19:57:09.797391 kernel: audit: type=1327 audit(1696276629.777:1232): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:09.801000 audit[3455]: USER_START pid=3455 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.801000 audit[3457]: CRED_ACQ pid=3457 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.814802 kernel: audit: type=1105 audit(1696276629.801:1233): pid=3455 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.814885 kernel: audit: type=1103 audit(1696276629.801:1234): pid=3457 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:09.858371 kubelet[2747]: E1002 19:57:09.857185 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:57:10.026394 kubelet[2747]: E1002 19:57:10.026368 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:10.070894 sshd[3455]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:10.071000 audit[3455]: USER_END pid=3455 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.072000 audit[3455]: CRED_DISP pid=3455 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.081512 systemd[1]: sshd@16-172.31.26.217:22-139.178.89.65:57432.service: Deactivated successfully. Oct 2 19:57:10.082462 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:57:10.086242 kernel: audit: type=1106 audit(1696276630.071:1235): pid=3455 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.086355 kernel: audit: type=1104 audit(1696276630.072:1236): pid=3455 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.26.217:22-139.178.89.65:57432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:10.087157 systemd-logind[1629]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:57:10.088684 systemd-logind[1629]: Removed session 17. Oct 2 19:57:10.096737 systemd[1]: Started sshd@17-172.31.26.217:22-139.178.89.65:57438.service. Oct 2 19:57:10.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.26.217:22-139.178.89.65:57438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:10.272000 audit[3468]: USER_ACCT pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.274028 sshd[3468]: Accepted publickey for core from 139.178.89.65 port 57438 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:10.274000 audit[3468]: CRED_ACQ pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.274000 audit[3468]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc305e05d0 a2=3 a3=0 items=0 ppid=1 pid=3468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:10.274000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:10.276218 sshd[3468]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:10.282406 systemd[1]: Started session-18.scope. Oct 2 19:57:10.283361 systemd-logind[1629]: New session 18 of user core. Oct 2 19:57:10.288000 audit[3468]: USER_START pid=3468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:10.290000 audit[3470]: CRED_ACQ pid=3470 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.477302 sshd[3468]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:11.477000 audit[3468]: USER_END pid=3468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.477000 audit[3468]: CRED_DISP pid=3468 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.26.217:22-139.178.89.65:57438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:11.481039 systemd[1]: sshd@17-172.31.26.217:22-139.178.89.65:57438.service: Deactivated successfully. Oct 2 19:57:11.482197 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:57:11.485293 systemd-logind[1629]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:57:11.487816 systemd-logind[1629]: Removed session 18. Oct 2 19:57:11.503098 systemd[1]: Started sshd@18-172.31.26.217:22-139.178.89.65:57448.service. Oct 2 19:57:11.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.26.217:22-139.178.89.65:57448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:11.703000 audit[3479]: USER_ACCT pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.704062 sshd[3479]: Accepted publickey for core from 139.178.89.65 port 57448 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:11.704000 audit[3479]: CRED_ACQ pid=3479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.704000 audit[3479]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc46a85e10 a2=3 a3=0 items=0 ppid=1 pid=3479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:11.704000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:11.705896 sshd[3479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:11.712743 systemd[1]: Started session-19.scope. Oct 2 19:57:11.713447 systemd-logind[1629]: New session 19 of user core. Oct 2 19:57:11.718000 audit[3479]: USER_START pid=3479 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.719000 audit[3481]: CRED_ACQ pid=3481 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.945644 sshd[3479]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:11.946000 audit[3479]: USER_END pid=3479 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.946000 audit[3479]: CRED_DISP pid=3479 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:11.950696 systemd[1]: sshd@18-172.31.26.217:22-139.178.89.65:57448.service: Deactivated successfully. Oct 2 19:57:11.951666 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:57:11.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.26.217:22-139.178.89.65:57448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:11.953386 systemd-logind[1629]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:57:11.954646 systemd-logind[1629]: Removed session 19. Oct 2 19:57:15.028305 kubelet[2747]: E1002 19:57:15.028254 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:20.029305 kubelet[2747]: E1002 19:57:20.029186 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:21.976394 systemd[1]: Started sshd@19-172.31.26.217:22-139.178.89.65:42308.service. Oct 2 19:57:21.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.217:22-139.178.89.65:42308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:21.980406 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:57:21.980509 kernel: audit: type=1130 audit(1696276641.975:1256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.217:22-139.178.89.65:42308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:22.152000 audit[3490]: USER_ACCT pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.160626 sshd[3490]: Accepted publickey for core from 139.178.89.65 port 42308 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:22.159000 audit[3490]: CRED_ACQ pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.161793 sshd[3490]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:22.167617 kernel: audit: type=1101 audit(1696276642.152:1257): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.167708 kernel: audit: type=1103 audit(1696276642.159:1258): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.173733 kernel: audit: type=1006 audit(1696276642.160:1259): pid=3490 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:57:22.173894 kernel: audit: type=1300 audit(1696276642.160:1259): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec190b640 a2=3 a3=0 items=0 ppid=1 pid=3490 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:22.160000 audit[3490]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec190b640 a2=3 a3=0 items=0 ppid=1 pid=3490 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:22.172428 systemd[1]: Started session-20.scope. Oct 2 19:57:22.177370 systemd-logind[1629]: New session 20 of user core. Oct 2 19:57:22.160000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:22.187377 kernel: audit: type=1327 audit(1696276642.160:1259): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:22.188000 audit[3490]: USER_START pid=3490 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.190000 audit[3492]: CRED_ACQ pid=3492 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.202536 kernel: audit: type=1105 audit(1696276642.188:1260): pid=3490 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.202675 kernel: audit: type=1103 audit(1696276642.190:1261): pid=3492 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.411093 sshd[3490]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:22.412000 audit[3490]: USER_END pid=3490 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.415664 systemd[1]: sshd@19-172.31.26.217:22-139.178.89.65:42308.service: Deactivated successfully. Oct 2 19:57:22.417033 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:57:22.419492 systemd-logind[1629]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:57:22.421680 kernel: audit: type=1106 audit(1696276642.412:1262): pid=3490 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.421756 kernel: audit: type=1104 audit(1696276642.412:1263): pid=3490 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.412000 audit[3490]: CRED_DISP pid=3490 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:22.421017 systemd-logind[1629]: Removed session 20. Oct 2 19:57:22.414000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.26.217:22-139.178.89.65:42308 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:22.858451 kubelet[2747]: E1002 19:57:22.858280 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:57:25.030988 kubelet[2747]: E1002 19:57:25.030903 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:30.032994 kubelet[2747]: E1002 19:57:30.032942 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:32.447682 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:32.447817 kernel: audit: type=1130 audit(1696276652.437:1265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.217:22-139.178.89.65:47708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:32.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.217:22-139.178.89.65:47708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:32.438665 systemd[1]: Started sshd@20-172.31.26.217:22-139.178.89.65:47708.service. Oct 2 19:57:32.610000 audit[3503]: USER_ACCT pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.620083 sshd[3503]: Accepted publickey for core from 139.178.89.65 port 47708 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:32.620565 kernel: audit: type=1101 audit(1696276652.610:1266): pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.619000 audit[3503]: CRED_ACQ pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.621053 sshd[3503]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:32.631490 systemd[1]: Started session-21.scope. Oct 2 19:57:32.635023 kernel: audit: type=1103 audit(1696276652.619:1267): pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.635113 kernel: audit: type=1006 audit(1696276652.619:1268): pid=3503 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:57:32.635314 systemd-logind[1629]: New session 21 of user core. Oct 2 19:57:32.619000 audit[3503]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee63fe240 a2=3 a3=0 items=0 ppid=1 pid=3503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:32.619000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:32.648798 kernel: audit: type=1300 audit(1696276652.619:1268): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee63fe240 a2=3 a3=0 items=0 ppid=1 pid=3503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:32.649004 kernel: audit: type=1327 audit(1696276652.619:1268): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:32.649042 kernel: audit: type=1105 audit(1696276652.643:1269): pid=3503 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.643000 audit[3503]: USER_START pid=3503 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.657467 kernel: audit: type=1103 audit(1696276652.646:1270): pid=3505 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.646000 audit[3505]: CRED_ACQ pid=3505 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.861665 sshd[3503]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:32.868000 audit[3503]: USER_END pid=3503 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.871970 systemd[1]: sshd@20-172.31.26.217:22-139.178.89.65:47708.service: Deactivated successfully. Oct 2 19:57:32.872935 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:57:32.874729 systemd-logind[1629]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:57:32.877518 systemd-logind[1629]: Removed session 21. Oct 2 19:57:32.868000 audit[3503]: CRED_DISP pid=3503 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.883937 kernel: audit: type=1106 audit(1696276652.868:1271): pid=3503 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.884065 kernel: audit: type=1104 audit(1696276652.868:1272): pid=3503 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:32.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.26.217:22-139.178.89.65:47708 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:35.034515 kubelet[2747]: E1002 19:57:35.034484 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:36.857630 kubelet[2747]: E1002 19:57:36.857367 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:57:39.648000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.651282 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:57:39.651429 kernel: audit: type=1400 audit(1696276659.648:1274): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.648000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.662899 kernel: audit: type=1400 audit(1696276659.648:1275): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:39.662983 kernel: audit: type=1300 audit(1696276659.648:1275): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021b1ca0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:39.648000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021b1ca0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:39.648000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:39.679484 kernel: audit: type=1327 audit(1696276659.648:1275): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:39.679620 kernel: audit: type=1300 audit(1696276659.648:1274): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001c77f20 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:39.648000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001c77f20 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:39.648000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:39.696232 kernel: audit: type=1327 audit(1696276659.648:1274): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:40.035582 kubelet[2747]: E1002 19:57:40.035550 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:41.246000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.246000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.265884 kernel: audit: type=1400 audit(1696276661.246:1277): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.266019 kernel: audit: type=1400 audit(1696276661.246:1276): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.266060 kernel: audit: type=1300 audit(1696276661.246:1276): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008c82bd0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:57:41.246000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008c82bd0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:57:41.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:57:41.284883 kernel: audit: type=1327 audit(1696276661.246:1276): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:57:41.246000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.246000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008c82c60 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:57:41.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:57:41.246000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0084e2ba0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:57:41.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:57:41.262000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.262000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008c82d80 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:57:41.262000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:57:41.270000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.270000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0094aacc0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:57:41.270000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:57:41.273000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:41.273000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c008b87cb0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:57:41.273000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:57:42.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.26.217:22-139.178.89.65:52804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:42.895763 systemd[1]: Started sshd@21-172.31.26.217:22-139.178.89.65:52804.service. Oct 2 19:57:43.083000 audit[3515]: USER_ACCT pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:43.085457 sshd[3515]: Accepted publickey for core from 139.178.89.65 port 52804 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:43.085000 audit[3515]: CRED_ACQ pid=3515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:43.085000 audit[3515]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1dc106f0 a2=3 a3=0 items=0 ppid=1 pid=3515 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:43.085000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:43.087907 sshd[3515]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:43.108799 systemd[1]: Started session-22.scope. Oct 2 19:57:43.109785 systemd-logind[1629]: New session 22 of user core. Oct 2 19:57:43.116000 audit[3515]: USER_START pid=3515 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:43.117000 audit[3517]: CRED_ACQ pid=3517 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:43.336789 sshd[3515]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:43.339000 audit[3515]: USER_END pid=3515 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:43.339000 audit[3515]: CRED_DISP pid=3515 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:43.342034 systemd[1]: sshd@21-172.31.26.217:22-139.178.89.65:52804.service: Deactivated successfully. Oct 2 19:57:43.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.26.217:22-139.178.89.65:52804 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:43.343064 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:57:43.344015 systemd-logind[1629]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:57:43.345192 systemd-logind[1629]: Removed session 22. Oct 2 19:57:45.036814 kubelet[2747]: E1002 19:57:45.036757 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:48.858039 kubelet[2747]: E1002 19:57:48.857987 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:57:50.038569 kubelet[2747]: E1002 19:57:50.038527 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:53.368284 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:57:53.368425 kernel: audit: type=1130 audit(1696276673.365:1291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.217:22-139.178.89.65:59296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:53.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.217:22-139.178.89.65:59296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:53.365219 systemd[1]: Started sshd@22-172.31.26.217:22-139.178.89.65:59296.service. Oct 2 19:57:53.534000 audit[3529]: USER_ACCT pid=3529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.535129 sshd[3529]: Accepted publickey for core from 139.178.89.65 port 59296 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:57:53.541286 kernel: audit: type=1101 audit(1696276673.534:1292): pid=3529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.541000 audit[3529]: CRED_ACQ pid=3529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.542608 sshd[3529]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:57:53.553235 kernel: audit: type=1103 audit(1696276673.541:1293): pid=3529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.553394 kernel: audit: type=1006 audit(1696276673.541:1294): pid=3529 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:57:53.553769 kernel: audit: type=1300 audit(1696276673.541:1294): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6fe0b850 a2=3 a3=0 items=0 ppid=1 pid=3529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:53.541000 audit[3529]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6fe0b850 a2=3 a3=0 items=0 ppid=1 pid=3529 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:57:53.556312 systemd[1]: Started session-23.scope. Oct 2 19:57:53.558334 systemd-logind[1629]: New session 23 of user core. Oct 2 19:57:53.541000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:53.563339 kernel: audit: type=1327 audit(1696276673.541:1294): proctitle=737368643A20636F7265205B707269765D Oct 2 19:57:53.566000 audit[3529]: USER_START pid=3529 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.576313 kernel: audit: type=1105 audit(1696276673.566:1295): pid=3529 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.576000 audit[3531]: CRED_ACQ pid=3531 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.583345 kernel: audit: type=1103 audit(1696276673.576:1296): pid=3531 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.787302 sshd[3529]: pam_unix(sshd:session): session closed for user core Oct 2 19:57:53.788000 audit[3529]: USER_END pid=3529 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.798417 kernel: audit: type=1106 audit(1696276673.788:1297): pid=3529 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.790000 audit[3529]: CRED_DISP pid=3529 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.801724 systemd[1]: sshd@22-172.31.26.217:22-139.178.89.65:59296.service: Deactivated successfully. Oct 2 19:57:53.802686 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:57:53.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.26.217:22-139.178.89.65:59296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:57:53.805206 systemd-logind[1629]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:57:53.806283 kernel: audit: type=1104 audit(1696276673.790:1298): pid=3529 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:57:53.806907 systemd-logind[1629]: Removed session 23. Oct 2 19:57:55.040109 kubelet[2747]: E1002 19:57:55.040080 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:57:58.342000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.342000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0024d85e0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:58.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:58.343000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.343000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0024d8600 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:58.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:58.351000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.351000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002455200 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:58.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:57:58.351000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:57:58.351000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002455220 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:57:58.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:00.041654 kubelet[2747]: E1002 19:58:00.041625 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:02.857623 kubelet[2747]: E1002 19:58:02.857587 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:58:03.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.26.217:22-139.178.89.65:55368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:03.823121 systemd[1]: Started sshd@23-172.31.26.217:22-139.178.89.65:55368.service. Oct 2 19:58:03.826822 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:58:03.826937 kernel: audit: type=1130 audit(1696276683.822:1304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.26.217:22-139.178.89.65:55368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:04.009000 audit[3543]: USER_ACCT pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.012068 sshd[3543]: Accepted publickey for core from 139.178.89.65 port 55368 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:04.021296 kernel: audit: type=1101 audit(1696276684.009:1305): pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.021000 audit[3543]: CRED_ACQ pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.024018 sshd[3543]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:04.030335 kernel: audit: type=1103 audit(1696276684.021:1306): pid=3543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.030450 kernel: audit: type=1006 audit(1696276684.021:1307): pid=3543 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:58:04.021000 audit[3543]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe821e2d80 a2=3 a3=0 items=0 ppid=1 pid=3543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:04.036487 systemd-logind[1629]: New session 24 of user core. Oct 2 19:58:04.041277 systemd[1]: Started session-24.scope. Oct 2 19:58:04.045157 kernel: audit: type=1300 audit(1696276684.021:1307): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe821e2d80 a2=3 a3=0 items=0 ppid=1 pid=3543 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:04.021000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:04.052374 kernel: audit: type=1327 audit(1696276684.021:1307): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:04.053000 audit[3543]: USER_START pid=3543 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.053000 audit[3545]: CRED_ACQ pid=3545 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.065321 kernel: audit: type=1105 audit(1696276684.053:1308): pid=3543 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.065368 kernel: audit: type=1103 audit(1696276684.053:1309): pid=3545 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.291666 sshd[3543]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:04.292000 audit[3543]: USER_END pid=3543 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.293000 audit[3543]: CRED_DISP pid=3543 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.304615 systemd[1]: sshd@23-172.31.26.217:22-139.178.89.65:55368.service: Deactivated successfully. Oct 2 19:58:04.305560 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:58:04.307924 systemd-logind[1629]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:58:04.310337 kernel: audit: type=1106 audit(1696276684.292:1310): pid=3543 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.310447 kernel: audit: type=1104 audit(1696276684.293:1311): pid=3543 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:04.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.26.217:22-139.178.89.65:55368 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:04.311477 systemd-logind[1629]: Removed session 24. Oct 2 19:58:05.043367 kubelet[2747]: E1002 19:58:05.043277 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:10.044840 kubelet[2747]: E1002 19:58:10.044801 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:14.323284 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:14.323521 kernel: audit: type=1130 audit(1696276694.320:1313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.26.217:22-139.178.89.65:42270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:14.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.26.217:22-139.178.89.65:42270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:14.321146 systemd[1]: Started sshd@24-172.31.26.217:22-139.178.89.65:42270.service. Oct 2 19:58:14.493000 audit[3555]: USER_ACCT pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.502332 kernel: audit: type=1101 audit(1696276694.493:1314): pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.502388 sshd[3555]: Accepted publickey for core from 139.178.89.65 port 42270 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:14.501000 audit[3555]: CRED_ACQ pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.503256 sshd[3555]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:14.511703 kernel: audit: type=1103 audit(1696276694.501:1315): pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.511944 kernel: audit: type=1006 audit(1696276694.501:1316): pid=3555 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:58:14.510985 systemd[1]: Started session-25.scope. Oct 2 19:58:14.513769 systemd-logind[1629]: New session 25 of user core. Oct 2 19:58:14.501000 audit[3555]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff57f21250 a2=3 a3=0 items=0 ppid=1 pid=3555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:14.524364 kernel: audit: type=1300 audit(1696276694.501:1316): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff57f21250 a2=3 a3=0 items=0 ppid=1 pid=3555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:14.524474 kernel: audit: type=1327 audit(1696276694.501:1316): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:14.524509 kernel: audit: type=1105 audit(1696276694.521:1317): pid=3555 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.501000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:14.521000 audit[3555]: USER_START pid=3555 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.532006 kernel: audit: type=1103 audit(1696276694.523:1318): pid=3557 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.523000 audit[3557]: CRED_ACQ pid=3557 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.737090 sshd[3555]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:14.737000 audit[3555]: USER_END pid=3555 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.739000 audit[3555]: CRED_DISP pid=3555 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.748177 systemd[1]: sshd@24-172.31.26.217:22-139.178.89.65:42270.service: Deactivated successfully. Oct 2 19:58:14.749348 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:58:14.751844 systemd-logind[1629]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:58:14.754085 kernel: audit: type=1106 audit(1696276694.737:1319): pid=3555 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.754199 kernel: audit: type=1104 audit(1696276694.739:1320): pid=3555 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:14.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.26.217:22-139.178.89.65:42270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:14.754501 systemd-logind[1629]: Removed session 25. Oct 2 19:58:15.046273 kubelet[2747]: E1002 19:58:15.046143 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:16.861533 env[1634]: time="2023-10-02T19:58:16.861486175Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:58:16.878964 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2333363668.mount: Deactivated successfully. Oct 2 19:58:16.892405 env[1634]: time="2023-10-02T19:58:16.892335419Z" level=info msg="CreateContainer within sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\"" Oct 2 19:58:16.893715 env[1634]: time="2023-10-02T19:58:16.893665695Z" level=info msg="StartContainer for \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\"" Oct 2 19:58:16.932892 systemd[1]: Started cri-containerd-90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2.scope. Oct 2 19:58:16.978359 systemd[1]: cri-containerd-90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2.scope: Deactivated successfully. Oct 2 19:58:17.009880 env[1634]: time="2023-10-02T19:58:17.009815716Z" level=info msg="shim disconnected" id=90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2 Oct 2 19:58:17.009880 env[1634]: time="2023-10-02T19:58:17.009877032Z" level=warning msg="cleaning up after shim disconnected" id=90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2 namespace=k8s.io Oct 2 19:58:17.009880 env[1634]: time="2023-10-02T19:58:17.009889031Z" level=info msg="cleaning up dead shim" Oct 2 19:58:17.019500 env[1634]: time="2023-10-02T19:58:17.019448331Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3589 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:58:17Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:58:17.019918 env[1634]: time="2023-10-02T19:58:17.019742924Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 19:58:17.023393 env[1634]: time="2023-10-02T19:58:17.023330225Z" level=error msg="Failed to pipe stderr of container \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\"" error="reading from a closed fifo" Oct 2 19:58:17.024356 env[1634]: time="2023-10-02T19:58:17.024307240Z" level=error msg="Failed to pipe stdout of container \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\"" error="reading from a closed fifo" Oct 2 19:58:17.030397 env[1634]: time="2023-10-02T19:58:17.030334988Z" level=error msg="StartContainer for \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:58:17.030648 kubelet[2747]: E1002 19:58:17.030613 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2" Oct 2 19:58:17.031171 kubelet[2747]: E1002 19:58:17.031050 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:58:17.031171 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:58:17.031171 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:58:17.031171 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rkbbf,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:58:17.031171 kubelet[2747]: E1002 19:58:17.031098 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:58:17.616437 kubelet[2747]: I1002 19:58:17.616401 2747 scope.go:115] "RemoveContainer" containerID="f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef" Oct 2 19:58:17.616855 kubelet[2747]: I1002 19:58:17.616790 2747 scope.go:115] "RemoveContainer" containerID="f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef" Oct 2 19:58:17.621252 env[1634]: time="2023-10-02T19:58:17.621210929Z" level=info msg="RemoveContainer for \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\"" Oct 2 19:58:17.622166 env[1634]: time="2023-10-02T19:58:17.622134546Z" level=info msg="RemoveContainer for \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\"" Oct 2 19:58:17.623222 env[1634]: time="2023-10-02T19:58:17.622698586Z" level=error msg="RemoveContainer for \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\" failed" error="failed to set removing state for container \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\": container is already in removing state" Oct 2 19:58:17.624050 kubelet[2747]: E1002 19:58:17.623491 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\": container is already in removing state" containerID="f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef" Oct 2 19:58:17.624050 kubelet[2747]: E1002 19:58:17.623536 2747 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef": container is already in removing state; Skipping pod "cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)" Oct 2 19:58:17.624050 kubelet[2747]: E1002 19:58:17.623905 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:58:17.628539 env[1634]: time="2023-10-02T19:58:17.628496249Z" level=info msg="RemoveContainer for \"f90ba0df633209141acbe4fe4b7fe9dd6c21e108c127a16c3c0aa6711c4bdcef\" returns successfully" Oct 2 19:58:17.873977 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2-rootfs.mount: Deactivated successfully. Oct 2 19:58:20.047731 kubelet[2747]: E1002 19:58:20.047699 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:20.115205 kubelet[2747]: W1002 19:58:20.115152 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice/cri-containerd-90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2.scope WatchSource:0}: task 90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2 not found: not found Oct 2 19:58:24.775024 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:24.775187 kernel: audit: type=1130 audit(1696276704.764:1322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.26.217:22-139.178.89.65:33362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:24.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.26.217:22-139.178.89.65:33362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:24.765494 systemd[1]: Started sshd@25-172.31.26.217:22-139.178.89.65:33362.service. Oct 2 19:58:24.942000 audit[3603]: USER_ACCT pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:24.951977 sshd[3603]: Accepted publickey for core from 139.178.89.65 port 33362 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:24.952503 kernel: audit: type=1101 audit(1696276704.942:1323): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:24.964040 kernel: audit: type=1103 audit(1696276704.951:1324): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:24.964284 kernel: audit: type=1006 audit(1696276704.951:1325): pid=3603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:58:24.951000 audit[3603]: CRED_ACQ pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:24.960956 systemd[1]: Started session-26.scope. Oct 2 19:58:24.953194 sshd[3603]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:24.963127 systemd-logind[1629]: New session 26 of user core. Oct 2 19:58:24.951000 audit[3603]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda8a169d0 a2=3 a3=0 items=0 ppid=1 pid=3603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:24.951000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:24.976078 kernel: audit: type=1300 audit(1696276704.951:1325): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda8a169d0 a2=3 a3=0 items=0 ppid=1 pid=3603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:24.976158 kernel: audit: type=1327 audit(1696276704.951:1325): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:24.971000 audit[3603]: USER_START pid=3603 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:24.974000 audit[3605]: CRED_ACQ pid=3605 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:24.998606 kernel: audit: type=1105 audit(1696276704.971:1326): pid=3603 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:24.998762 kernel: audit: type=1103 audit(1696276704.974:1327): pid=3605 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:25.049350 kubelet[2747]: E1002 19:58:25.049235 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:25.190582 sshd[3603]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:25.191000 audit[3603]: USER_END pid=3603 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:25.195374 systemd[1]: sshd@25-172.31.26.217:22-139.178.89.65:33362.service: Deactivated successfully. Oct 2 19:58:25.196608 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:58:25.198934 systemd-logind[1629]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:58:25.191000 audit[3603]: CRED_DISP pid=3603 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:25.200935 systemd-logind[1629]: Removed session 26. Oct 2 19:58:25.207086 kernel: audit: type=1106 audit(1696276705.191:1328): pid=3603 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:25.207214 kernel: audit: type=1104 audit(1696276705.191:1329): pid=3603 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:25.191000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.26.217:22-139.178.89.65:33362 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:30.050980 kubelet[2747]: E1002 19:58:30.050946 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:32.857499 kubelet[2747]: E1002 19:58:32.857465 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:58:35.052490 kubelet[2747]: E1002 19:58:35.052460 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:35.217290 systemd[1]: Started sshd@26-172.31.26.217:22-139.178.89.65:46002.service. Oct 2 19:58:35.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.26.217:22-139.178.89.65:46002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:35.226749 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:58:35.226813 kernel: audit: type=1130 audit(1696276715.224:1331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.26.217:22-139.178.89.65:46002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:35.385000 audit[3617]: USER_ACCT pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.386974 sshd[3617]: Accepted publickey for core from 139.178.89.65 port 46002 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:35.392000 audit[3617]: CRED_ACQ pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.394762 sshd[3617]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:35.400868 kernel: audit: type=1101 audit(1696276715.385:1332): pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.400976 kernel: audit: type=1103 audit(1696276715.392:1333): pid=3617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.401016 kernel: audit: type=1006 audit(1696276715.393:1334): pid=3617 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:58:35.403230 systemd[1]: Started session-27.scope. Oct 2 19:58:35.393000 audit[3617]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc26f937f0 a2=3 a3=0 items=0 ppid=1 pid=3617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:35.406248 systemd-logind[1629]: New session 27 of user core. Oct 2 19:58:35.412302 kernel: audit: type=1300 audit(1696276715.393:1334): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc26f937f0 a2=3 a3=0 items=0 ppid=1 pid=3617 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:35.412410 kernel: audit: type=1327 audit(1696276715.393:1334): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:35.393000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:35.413000 audit[3617]: USER_START pid=3617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.423431 kernel: audit: type=1105 audit(1696276715.413:1335): pid=3617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.423624 kernel: audit: type=1103 audit(1696276715.416:1336): pid=3619 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.416000 audit[3619]: CRED_ACQ pid=3619 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.592990 sshd[3617]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:35.593000 audit[3617]: USER_END pid=3617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.596982 systemd[1]: sshd@26-172.31.26.217:22-139.178.89.65:46002.service: Deactivated successfully. Oct 2 19:58:35.597898 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:58:35.600257 systemd-logind[1629]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:58:35.593000 audit[3617]: CRED_DISP pid=3617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.601906 systemd-logind[1629]: Removed session 27. Oct 2 19:58:35.606895 kernel: audit: type=1106 audit(1696276715.593:1337): pid=3617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.607009 kernel: audit: type=1104 audit(1696276715.593:1338): pid=3617 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:35.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.26.217:22-139.178.89.65:46002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:39.650000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:39.650000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:39.650000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012bd8e0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:58:39.650000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:39.650000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000833440 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:58:39.650000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:40.054011 kubelet[2747]: E1002 19:58:40.053976 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:41.246000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.249243 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 19:58:41.249368 kernel: audit: type=1400 audit(1696276721.246:1342): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.246000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003ba3e90 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.263111 kernel: audit: type=1300 audit(1696276721.246:1342): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003ba3e90 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.263271 kernel: audit: type=1327 audit(1696276721.246:1342): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.246000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.247000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.275718 kernel: audit: type=1400 audit(1696276721.247:1343): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.275832 kernel: audit: type=1300 audit(1696276721.247:1343): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003ba3ef0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.247000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003ba3ef0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.247000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.288425 kernel: audit: type=1327 audit(1696276721.247:1343): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.288546 kernel: audit: type=1400 audit(1696276721.248:1344): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.248000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.299593 kernel: audit: type=1300 audit(1696276721.248:1344): arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a5d5160 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.248000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00a5d5160 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.248000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.318713 kernel: audit: type=1327 audit(1696276721.248:1344): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.318872 kernel: audit: type=1400 audit(1696276721.263:1345): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.263000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.263000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003c1de90 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.263000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.273000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.273000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c00aca6900 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.273000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:41.273000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:41.273000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003cd42a0 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:58:41.273000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:58:45.055557 kubelet[2747]: E1002 19:58:45.055527 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:45.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.26.217:22-139.178.89.65:40670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:45.629107 systemd[1]: Started sshd@27-172.31.26.217:22-139.178.89.65:40670.service. Oct 2 19:58:45.808000 audit[3632]: USER_ACCT pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:45.810499 sshd[3632]: Accepted publickey for core from 139.178.89.65 port 40670 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:45.812000 audit[3632]: CRED_ACQ pid=3632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:45.814000 audit[3632]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeef830010 a2=3 a3=0 items=0 ppid=1 pid=3632 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:45.814000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:45.818757 sshd[3632]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:45.837794 systemd-logind[1629]: New session 28 of user core. Oct 2 19:58:45.838155 systemd[1]: Started session-28.scope. Oct 2 19:58:45.848000 audit[3632]: USER_START pid=3632 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:45.852000 audit[3634]: CRED_ACQ pid=3634 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:45.860290 kubelet[2747]: E1002 19:58:45.860212 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-7b6w5_kube-system(62014256-7954-4659-a6be-c99f9f52189c)\"" pod="kube-system/cilium-7b6w5" podUID=62014256-7954-4659-a6be-c99f9f52189c Oct 2 19:58:46.057377 sshd[3632]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:46.059000 audit[3632]: USER_END pid=3632 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.060000 audit[3632]: CRED_DISP pid=3632 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.064292 systemd[1]: sshd@27-172.31.26.217:22-139.178.89.65:40670.service: Deactivated successfully. Oct 2 19:58:46.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.26.217:22-139.178.89.65:40670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:46.066094 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:58:46.067030 systemd-logind[1629]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:58:46.068357 systemd-logind[1629]: Removed session 28. Oct 2 19:58:46.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.26.217:22-139.178.89.65:60244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:46.085941 systemd[1]: Started sshd@28-172.31.26.217:22-139.178.89.65:60244.service. Oct 2 19:58:46.259807 kernel: kauditd_printk_skb: 20 callbacks suppressed Oct 2 19:58:46.259977 kernel: audit: type=1101 audit(1696276726.251:1358): pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.251000 audit[3646]: USER_ACCT pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.260155 sshd[3646]: Accepted publickey for core from 139.178.89.65 port 60244 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:46.260768 sshd[3646]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:46.258000 audit[3646]: CRED_ACQ pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.267374 kernel: audit: type=1103 audit(1696276726.258:1359): pid=3646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.272351 kernel: audit: type=1006 audit(1696276726.258:1360): pid=3646 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 19:58:46.267945 systemd[1]: Started session-29.scope. Oct 2 19:58:46.269802 systemd-logind[1629]: New session 29 of user core. Oct 2 19:58:46.258000 audit[3646]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe2fab550 a2=3 a3=0 items=0 ppid=1 pid=3646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:46.258000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:46.292308 kernel: audit: type=1300 audit(1696276726.258:1360): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe2fab550 a2=3 a3=0 items=0 ppid=1 pid=3646 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:46.292463 kernel: audit: type=1327 audit(1696276726.258:1360): proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:46.292500 kernel: audit: type=1105 audit(1696276726.276:1361): pid=3646 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.276000 audit[3646]: USER_START pid=3646 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.282000 audit[3648]: CRED_ACQ pid=3648 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:46.306305 kernel: audit: type=1103 audit(1696276726.282:1362): pid=3648 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:47.833250 env[1634]: time="2023-10-02T19:58:47.833001424Z" level=info msg="StopPodSandbox for \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\"" Oct 2 19:58:47.833250 env[1634]: time="2023-10-02T19:58:47.833098552Z" level=info msg="Container to stop \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:58:47.838392 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8-shm.mount: Deactivated successfully. Oct 2 19:58:47.854406 systemd[1]: cri-containerd-a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8.scope: Deactivated successfully. Oct 2 19:58:47.853000 audit: BPF prog-id=119 op=UNLOAD Oct 2 19:58:47.861511 kernel: audit: type=1334 audit(1696276727.853:1363): prog-id=119 op=UNLOAD Oct 2 19:58:47.861000 audit: BPF prog-id=122 op=UNLOAD Oct 2 19:58:47.865378 kernel: audit: type=1334 audit(1696276727.861:1364): prog-id=122 op=UNLOAD Oct 2 19:58:47.871753 env[1634]: time="2023-10-02T19:58:47.871693581Z" level=info msg="StopContainer for \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\" with timeout 30 (s)" Oct 2 19:58:47.873651 env[1634]: time="2023-10-02T19:58:47.873604516Z" level=info msg="Stop container \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\" with signal terminated" Oct 2 19:58:47.916618 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8-rootfs.mount: Deactivated successfully. Oct 2 19:58:47.943934 env[1634]: time="2023-10-02T19:58:47.943880848Z" level=info msg="shim disconnected" id=a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8 Oct 2 19:58:47.943934 env[1634]: time="2023-10-02T19:58:47.943936392Z" level=warning msg="cleaning up after shim disconnected" id=a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8 namespace=k8s.io Oct 2 19:58:47.944383 env[1634]: time="2023-10-02T19:58:47.943948282Z" level=info msg="cleaning up dead shim" Oct 2 19:58:47.949458 systemd[1]: cri-containerd-a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51.scope: Deactivated successfully. Oct 2 19:58:47.954827 kernel: audit: type=1334 audit(1696276727.948:1365): prog-id=130 op=UNLOAD Oct 2 19:58:47.948000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:58:47.954000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:58:47.964502 env[1634]: time="2023-10-02T19:58:47.964445257Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3679 runtime=io.containerd.runc.v2\n" Oct 2 19:58:47.965014 env[1634]: time="2023-10-02T19:58:47.964907028Z" level=info msg="TearDown network for sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" successfully" Oct 2 19:58:47.965112 env[1634]: time="2023-10-02T19:58:47.965015599Z" level=info msg="StopPodSandbox for \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" returns successfully" Oct 2 19:58:47.988664 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51-rootfs.mount: Deactivated successfully. Oct 2 19:58:48.006594 env[1634]: time="2023-10-02T19:58:48.006533362Z" level=info msg="shim disconnected" id=a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51 Oct 2 19:58:48.006594 env[1634]: time="2023-10-02T19:58:48.006591304Z" level=warning msg="cleaning up after shim disconnected" id=a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51 namespace=k8s.io Oct 2 19:58:48.006594 env[1634]: time="2023-10-02T19:58:48.006604048Z" level=info msg="cleaning up dead shim" Oct 2 19:58:48.017815 env[1634]: time="2023-10-02T19:58:48.017767473Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3707 runtime=io.containerd.runc.v2\n" Oct 2 19:58:48.021019 env[1634]: time="2023-10-02T19:58:48.020941856Z" level=info msg="StopContainer for \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\" returns successfully" Oct 2 19:58:48.022017 env[1634]: time="2023-10-02T19:58:48.021971035Z" level=info msg="StopPodSandbox for \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\"" Oct 2 19:58:48.022125 env[1634]: time="2023-10-02T19:58:48.022050209Z" level=info msg="Container to stop \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:58:48.024010 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512-shm.mount: Deactivated successfully. Oct 2 19:58:48.039220 systemd[1]: cri-containerd-0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512.scope: Deactivated successfully. Oct 2 19:58:48.038000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:58:48.041994 kubelet[2747]: I1002 19:58:48.041961 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cni-path\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042034 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/62014256-7954-4659-a6be-c99f9f52189c-clustermesh-secrets\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042062 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-bpf-maps\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042108 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-cgroup\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042138 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-etc-cni-netd\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042184 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-kernel\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042217 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rkbbf\" (UniqueName: \"kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-kube-api-access-rkbbf\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042280 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-run\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042311 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-xtables-lock\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042355 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/62014256-7954-4659-a6be-c99f9f52189c-cilium-config-path\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042385 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-net\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042430 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-hubble-tls\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042458 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-lib-modules\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.042522 kubelet[2747]: I1002 19:58:48.042487 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-hostproc\") pod \"62014256-7954-4659-a6be-c99f9f52189c\" (UID: \"62014256-7954-4659-a6be-c99f9f52189c\") " Oct 2 19:58:48.044311 kubelet[2747]: I1002 19:58:48.043158 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.044311 kubelet[2747]: I1002 19:58:48.043217 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.044311 kubelet[2747]: W1002 19:58:48.043389 2747 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/62014256-7954-4659-a6be-c99f9f52189c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:58:48.044000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:58:48.045818 kubelet[2747]: I1002 19:58:48.045640 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-hostproc" (OuterVolumeSpecName: "hostproc") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.045818 kubelet[2747]: I1002 19:58:48.045723 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.046162 kubelet[2747]: I1002 19:58:48.046139 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.047173 kubelet[2747]: I1002 19:58:48.046651 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cni-path" (OuterVolumeSpecName: "cni-path") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.047173 kubelet[2747]: I1002 19:58:48.046770 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/62014256-7954-4659-a6be-c99f9f52189c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:58:48.047173 kubelet[2747]: I1002 19:58:48.046816 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.047173 kubelet[2747]: I1002 19:58:48.046842 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.047173 kubelet[2747]: I1002 19:58:48.046866 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.047173 kubelet[2747]: I1002 19:58:48.046889 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:58:48.058224 kubelet[2747]: I1002 19:58:48.057719 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-kube-api-access-rkbbf" (OuterVolumeSpecName: "kube-api-access-rkbbf") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "kube-api-access-rkbbf". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:58:48.060308 systemd[1]: var-lib-kubelet-pods-62014256\x2d7954\x2d4659\x2da6be\x2dc99f9f52189c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drkbbf.mount: Deactivated successfully. Oct 2 19:58:48.060468 systemd[1]: var-lib-kubelet-pods-62014256\x2d7954\x2d4659\x2da6be\x2dc99f9f52189c-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:58:48.064173 kubelet[2747]: I1002 19:58:48.064135 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:58:48.066654 kubelet[2747]: I1002 19:58:48.066571 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/62014256-7954-4659-a6be-c99f9f52189c-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "62014256-7954-4659-a6be-c99f9f52189c" (UID: "62014256-7954-4659-a6be-c99f9f52189c"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:58:48.109861 env[1634]: time="2023-10-02T19:58:48.106515488Z" level=info msg="shim disconnected" id=0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512 Oct 2 19:58:48.109861 env[1634]: time="2023-10-02T19:58:48.106573754Z" level=warning msg="cleaning up after shim disconnected" id=0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512 namespace=k8s.io Oct 2 19:58:48.109861 env[1634]: time="2023-10-02T19:58:48.106586448Z" level=info msg="cleaning up dead shim" Oct 2 19:58:48.117868 env[1634]: time="2023-10-02T19:58:48.117742965Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3741 runtime=io.containerd.runc.v2\n" Oct 2 19:58:48.118330 env[1634]: time="2023-10-02T19:58:48.118290393Z" level=info msg="TearDown network for sandbox \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" successfully" Oct 2 19:58:48.118481 env[1634]: time="2023-10-02T19:58:48.118327376Z" level=info msg="StopPodSandbox for \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" returns successfully" Oct 2 19:58:48.143666 kubelet[2747]: I1002 19:58:48.143620 2747 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-bpf-maps\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143666 kubelet[2747]: I1002 19:58:48.143655 2747 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cni-path\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143666 kubelet[2747]: I1002 19:58:48.143671 2747 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/62014256-7954-4659-a6be-c99f9f52189c-clustermesh-secrets\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143684 2747 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-xtables-lock\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143698 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/62014256-7954-4659-a6be-c99f9f52189c-cilium-config-path\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143710 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-cgroup\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143722 2747 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-etc-cni-netd\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143734 2747 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-kernel\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143746 2747 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-rkbbf\" (UniqueName: \"kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-kube-api-access-rkbbf\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143761 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-cilium-run\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143774 2747 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-host-proc-sys-net\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143786 2747 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/62014256-7954-4659-a6be-c99f9f52189c-hubble-tls\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143799 2747 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-lib-modules\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.143941 kubelet[2747]: I1002 19:58:48.143812 2747 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/62014256-7954-4659-a6be-c99f9f52189c-hostproc\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.244241 kubelet[2747]: I1002 19:58:48.244202 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-jr8tr\" (UniqueName: \"kubernetes.io/projected/28948759-ed20-4a22-8986-6bf20a4f3d02-kube-api-access-jr8tr\") pod \"28948759-ed20-4a22-8986-6bf20a4f3d02\" (UID: \"28948759-ed20-4a22-8986-6bf20a4f3d02\") " Oct 2 19:58:48.244458 kubelet[2747]: I1002 19:58:48.244290 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/28948759-ed20-4a22-8986-6bf20a4f3d02-cilium-config-path\") pod \"28948759-ed20-4a22-8986-6bf20a4f3d02\" (UID: \"28948759-ed20-4a22-8986-6bf20a4f3d02\") " Oct 2 19:58:48.245446 kubelet[2747]: W1002 19:58:48.244534 2747 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/28948759-ed20-4a22-8986-6bf20a4f3d02/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:58:48.249580 kubelet[2747]: I1002 19:58:48.249245 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/28948759-ed20-4a22-8986-6bf20a4f3d02-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "28948759-ed20-4a22-8986-6bf20a4f3d02" (UID: "28948759-ed20-4a22-8986-6bf20a4f3d02"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:58:48.251220 kubelet[2747]: I1002 19:58:48.251183 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/28948759-ed20-4a22-8986-6bf20a4f3d02-kube-api-access-jr8tr" (OuterVolumeSpecName: "kube-api-access-jr8tr") pod "28948759-ed20-4a22-8986-6bf20a4f3d02" (UID: "28948759-ed20-4a22-8986-6bf20a4f3d02"). InnerVolumeSpecName "kube-api-access-jr8tr". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:58:48.344638 kubelet[2747]: I1002 19:58:48.344595 2747 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-jr8tr\" (UniqueName: \"kubernetes.io/projected/28948759-ed20-4a22-8986-6bf20a4f3d02-kube-api-access-jr8tr\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.344638 kubelet[2747]: I1002 19:58:48.344638 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/28948759-ed20-4a22-8986-6bf20a4f3d02-cilium-config-path\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:58:48.692924 kubelet[2747]: I1002 19:58:48.692892 2747 scope.go:115] "RemoveContainer" containerID="a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51" Oct 2 19:58:48.699932 env[1634]: time="2023-10-02T19:58:48.699892869Z" level=info msg="RemoveContainer for \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\"" Oct 2 19:58:48.701547 systemd[1]: Removed slice kubepods-besteffort-pod28948759_ed20_4a22_8986_6bf20a4f3d02.slice. Oct 2 19:58:48.719282 env[1634]: time="2023-10-02T19:58:48.719195366Z" level=info msg="RemoveContainer for \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\" returns successfully" Oct 2 19:58:48.727251 kubelet[2747]: I1002 19:58:48.725508 2747 scope.go:115] "RemoveContainer" containerID="a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51" Oct 2 19:58:48.726744 systemd[1]: Removed slice kubepods-burstable-pod62014256_7954_4659_a6be_c99f9f52189c.slice. Oct 2 19:58:48.730988 env[1634]: time="2023-10-02T19:58:48.730895660Z" level=error msg="ContainerStatus for \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\": not found" Oct 2 19:58:48.731865 kubelet[2747]: E1002 19:58:48.731842 2747 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\": not found" containerID="a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51" Oct 2 19:58:48.732305 kubelet[2747]: I1002 19:58:48.732256 2747 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51} err="failed to get container status \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\": rpc error: code = NotFound desc = an error occurred when try to find container \"a7fe4dc84dd5e93f6d590db1ff69bd67c4846f903f991f48eb4eea6e4fcc3f51\": not found" Oct 2 19:58:48.732445 kubelet[2747]: I1002 19:58:48.732426 2747 scope.go:115] "RemoveContainer" containerID="90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2" Oct 2 19:58:48.734254 env[1634]: time="2023-10-02T19:58:48.734217818Z" level=info msg="RemoveContainer for \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\"" Oct 2 19:58:48.744825 env[1634]: time="2023-10-02T19:58:48.744779977Z" level=info msg="RemoveContainer for \"90759bfea0b8430ab478fc1211cf210dbf176d21845570d34a21bb56c86e68c2\" returns successfully" Oct 2 19:58:48.838362 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512-rootfs.mount: Deactivated successfully. Oct 2 19:58:48.838485 systemd[1]: var-lib-kubelet-pods-28948759\x2ded20\x2d4a22\x2d8986\x2d6bf20a4f3d02-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2djr8tr.mount: Deactivated successfully. Oct 2 19:58:48.838580 systemd[1]: var-lib-kubelet-pods-62014256\x2d7954\x2d4659\x2da6be\x2dc99f9f52189c-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:58:48.859505 kubelet[2747]: I1002 19:58:48.859475 2747 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=28948759-ed20-4a22-8986-6bf20a4f3d02 path="/var/lib/kubelet/pods/28948759-ed20-4a22-8986-6bf20a4f3d02/volumes" Oct 2 19:58:48.860350 kubelet[2747]: I1002 19:58:48.860326 2747 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=62014256-7954-4659-a6be-c99f9f52189c path="/var/lib/kubelet/pods/62014256-7954-4659-a6be-c99f9f52189c/volumes" Oct 2 19:58:49.794816 sshd[3646]: pam_unix(sshd:session): session closed for user core Oct 2 19:58:49.795000 audit[3646]: USER_END pid=3646 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:49.795000 audit[3646]: CRED_DISP pid=3646 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:49.798877 systemd[1]: sshd@28-172.31.26.217:22-139.178.89.65:60244.service: Deactivated successfully. Oct 2 19:58:49.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.26.217:22-139.178.89.65:60244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:49.800467 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:58:49.801856 systemd-logind[1629]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:58:49.803097 systemd-logind[1629]: Removed session 29. Oct 2 19:58:49.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.26.217:22-139.178.89.65:60260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:58:49.822531 systemd[1]: Started sshd@29-172.31.26.217:22-139.178.89.65:60260.service. Oct 2 19:58:50.017000 audit[3758]: USER_ACCT pid=3758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:50.018717 sshd[3758]: Accepted publickey for core from 139.178.89.65 port 60260 ssh2: RSA SHA256:KIgN61+zXp+dlF5wFSRCN73yCMDWObQthNuB0BDLhpo Oct 2 19:58:50.018000 audit[3758]: CRED_ACQ pid=3758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:50.018000 audit[3758]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff951b8a10 a2=3 a3=0 items=0 ppid=1 pid=3758 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:50.018000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:58:50.020473 sshd[3758]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:58:50.027199 systemd[1]: Started session-30.scope. Oct 2 19:58:50.027731 systemd-logind[1629]: New session 30 of user core. Oct 2 19:58:50.033000 audit[3758]: USER_START pid=3758 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:50.035000 audit[3760]: CRED_ACQ pid=3760 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:58:50.057075 kubelet[2747]: E1002 19:58:50.056977 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:51.466254 kubelet[2747]: I1002 19:58:51.466220 2747 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:58:51.469803 kubelet[2747]: E1002 19:58:51.466923 2747 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="28948759-ed20-4a22-8986-6bf20a4f3d02" containerName="cilium-operator" Oct 2 19:58:51.469803 kubelet[2747]: E1002 19:58:51.466947 2747 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: E1002 19:58:51.466958 2747 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: E1002 19:58:51.466968 2747 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: E1002 19:58:51.466976 2747 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: I1002 19:58:51.467023 2747 memory_manager.go:346] "RemoveStaleState removing state" podUID="28948759-ed20-4a22-8986-6bf20a4f3d02" containerName="cilium-operator" Oct 2 19:58:51.469803 kubelet[2747]: I1002 19:58:51.467035 2747 memory_manager.go:346] "RemoveStaleState removing state" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: I1002 19:58:51.467044 2747 memory_manager.go:346] "RemoveStaleState removing state" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: I1002 19:58:51.467052 2747 memory_manager.go:346] "RemoveStaleState removing state" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: I1002 19:58:51.467077 2747 memory_manager.go:346] "RemoveStaleState removing state" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: E1002 19:58:51.467105 2747 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: E1002 19:58:51.467116 2747 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: I1002 19:58:51.467153 2747 memory_manager.go:346] "RemoveStaleState removing state" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.469803 kubelet[2747]: I1002 19:58:51.467162 2747 memory_manager.go:346] "RemoveStaleState removing state" podUID="62014256-7954-4659-a6be-c99f9f52189c" containerName="mount-cgroup" Oct 2 19:58:51.477798 systemd[1]: Created slice kubepods-burstable-pod9495ac30_3315_46c7_a89c_9717e166ee4d.slice. Oct 2 19:58:51.500222 kubelet[2747]: W1002 19:58:51.500164 2747 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-26-217" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-217' and this object Oct 2 19:58:51.500979 kubelet[2747]: E1002 19:58:51.500949 2747 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-26-217" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-217' and this object Oct 2 19:58:51.501158 kubelet[2747]: W1002 19:58:51.500554 2747 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-26-217" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-217' and this object Oct 2 19:58:51.501671 kubelet[2747]: W1002 19:58:51.500881 2747 reflector.go:533] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-26-217" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-217' and this object Oct 2 19:58:51.501803 kubelet[2747]: E1002 19:58:51.501791 2747 reflector.go:148] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-26-217" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-217' and this object Oct 2 19:58:51.501909 kubelet[2747]: E1002 19:58:51.501899 2747 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-26-217" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-26-217' and this object Oct 2 19:58:51.573287 kubelet[2747]: I1002 19:58:51.573240 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cni-path\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.573552 kubelet[2747]: I1002 19:58:51.573521 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-run\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.573673 kubelet[2747]: I1002 19:58:51.573663 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-config-path\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.573772 kubelet[2747]: I1002 19:58:51.573763 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-xtables-lock\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.573878 kubelet[2747]: I1002 19:58:51.573870 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-bpf-maps\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.573974 kubelet[2747]: I1002 19:58:51.573965 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-hostproc\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574069 kubelet[2747]: I1002 19:58:51.574060 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-etc-cni-netd\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574169 kubelet[2747]: I1002 19:58:51.574160 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rgsbx\" (UniqueName: \"kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-kube-api-access-rgsbx\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574292 kubelet[2747]: I1002 19:58:51.574283 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-clustermesh-secrets\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574406 kubelet[2747]: I1002 19:58:51.574397 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-ipsec-secrets\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574509 kubelet[2747]: I1002 19:58:51.574500 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-cgroup\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574605 kubelet[2747]: I1002 19:58:51.574596 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-kernel\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574707 kubelet[2747]: I1002 19:58:51.574698 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-hubble-tls\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574812 kubelet[2747]: I1002 19:58:51.574801 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-lib-modules\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:51.574914 kubelet[2747]: I1002 19:58:51.574904 2747 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-net\") pod \"cilium-2vbw6\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " pod="kube-system/cilium-2vbw6" Oct 2 19:58:52.678769 kubelet[2747]: E1002 19:58:52.678714 2747 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:58:52.678769 kubelet[2747]: E1002 19:58:52.678770 2747 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-2vbw6: failed to sync secret cache: timed out waiting for the condition Oct 2 19:58:52.679469 kubelet[2747]: E1002 19:58:52.678858 2747 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-hubble-tls podName:9495ac30-3315-46c7-a89c-9717e166ee4d nodeName:}" failed. No retries permitted until 2023-10-02 19:58:53.178833636 +0000 UTC m=+248.703683549 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-hubble-tls") pod "cilium-2vbw6" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:58:52.679469 kubelet[2747]: E1002 19:58:52.678718 2747 secret.go:194] Couldn't get secret kube-system/cilium-ipsec-keys: failed to sync secret cache: timed out waiting for the condition Oct 2 19:58:52.679469 kubelet[2747]: E1002 19:58:52.679322 2747 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-ipsec-secrets podName:9495ac30-3315-46c7-a89c-9717e166ee4d nodeName:}" failed. No retries permitted until 2023-10-02 19:58:53.17930334 +0000 UTC m=+248.704153245 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-ipsec-secrets" (UniqueName: "kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-ipsec-secrets") pod "cilium-2vbw6" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:58:53.289255 env[1634]: time="2023-10-02T19:58:53.289208029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2vbw6,Uid:9495ac30-3315-46c7-a89c-9717e166ee4d,Namespace:kube-system,Attempt:0,}" Oct 2 19:58:53.314244 env[1634]: time="2023-10-02T19:58:53.314170293Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:58:53.314244 env[1634]: time="2023-10-02T19:58:53.314211310Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:58:53.314506 env[1634]: time="2023-10-02T19:58:53.314233492Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:58:53.314901 env[1634]: time="2023-10-02T19:58:53.314823234Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a pid=3779 runtime=io.containerd.runc.v2 Oct 2 19:58:53.343941 systemd[1]: Started cri-containerd-8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a.scope. Oct 2 19:58:53.369928 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:58:53.370310 kernel: audit: type=1400 audit(1696276733.361:1378): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.376553 kernel: audit: type=1400 audit(1696276733.361:1379): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.385419 kernel: audit: type=1400 audit(1696276733.361:1380): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.392120 kernel: audit: type=1400 audit(1696276733.361:1381): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.398744 kernel: audit: type=1400 audit(1696276733.361:1382): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.399022 kernel: audit: type=1400 audit(1696276733.361:1383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.409079 kernel: audit: type=1400 audit(1696276733.361:1384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.419004 kernel: audit: type=1400 audit(1696276733.361:1385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.419108 kernel: audit: type=1400 audit(1696276733.361:1386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.363000 audit: BPF prog-id=134 op=LOAD Oct 2 19:58:53.429612 kernel: audit: type=1400 audit(1696276733.363:1387): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3779 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:53.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866313464643461333738383335613230626434666463303636663262 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3779 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:53.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866313464643461333738383335613230626434666463303636663262 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.369000 audit: BPF prog-id=135 op=LOAD Oct 2 19:58:53.369000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00032a170 items=0 ppid=3779 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:53.369000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866313464643461333738383335613230626434666463303636663262 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit: BPF prog-id=136 op=LOAD Oct 2 19:58:53.375000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00032a1b8 items=0 ppid=3779 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:53.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866313464643461333738383335613230626434666463303636663262 Oct 2 19:58:53.375000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:58:53.375000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:58:53.375000 audit: BPF prog-id=137 op=LOAD Oct 2 19:58:53.375000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00032a5c8 items=0 ppid=3779 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:58:53.375000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866313464643461333738383335613230626434666463303636663262 Oct 2 19:58:53.440185 env[1634]: time="2023-10-02T19:58:53.440081787Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2vbw6,Uid:9495ac30-3315-46c7-a89c-9717e166ee4d,Namespace:kube-system,Attempt:0,} returns sandbox id \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\"" Oct 2 19:58:53.444433 env[1634]: time="2023-10-02T19:58:53.443877912Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:58:53.469799 env[1634]: time="2023-10-02T19:58:53.469752110Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\"" Oct 2 19:58:53.470795 env[1634]: time="2023-10-02T19:58:53.470754709Z" level=info msg="StartContainer for \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\"" Oct 2 19:58:53.493620 systemd[1]: Started cri-containerd-f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310.scope. Oct 2 19:58:53.509523 systemd[1]: cri-containerd-f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310.scope: Deactivated successfully. Oct 2 19:58:53.549553 env[1634]: time="2023-10-02T19:58:53.545620595Z" level=info msg="shim disconnected" id=f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310 Oct 2 19:58:53.549553 env[1634]: time="2023-10-02T19:58:53.545674269Z" level=warning msg="cleaning up after shim disconnected" id=f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310 namespace=k8s.io Oct 2 19:58:53.549553 env[1634]: time="2023-10-02T19:58:53.545686354Z" level=info msg="cleaning up dead shim" Oct 2 19:58:53.558452 env[1634]: time="2023-10-02T19:58:53.558393362Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3838 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:58:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:58:53.558748 env[1634]: time="2023-10-02T19:58:53.558684200Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:58:53.561446 env[1634]: time="2023-10-02T19:58:53.561391269Z" level=error msg="Failed to pipe stdout of container \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\"" error="reading from a closed fifo" Oct 2 19:58:53.562388 env[1634]: time="2023-10-02T19:58:53.562345517Z" level=error msg="Failed to pipe stderr of container \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\"" error="reading from a closed fifo" Oct 2 19:58:53.565061 env[1634]: time="2023-10-02T19:58:53.565012782Z" level=error msg="StartContainer for \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:58:53.565441 kubelet[2747]: E1002 19:58:53.565415 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310" Oct 2 19:58:53.565581 kubelet[2747]: E1002 19:58:53.565543 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:58:53.565581 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:58:53.565581 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:58:53.565581 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgsbx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:58:53.565817 kubelet[2747]: E1002 19:58:53.565591 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:58:53.731074 env[1634]: time="2023-10-02T19:58:53.731030458Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:58:53.753709 env[1634]: time="2023-10-02T19:58:53.753637424Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\"" Oct 2 19:58:53.756630 env[1634]: time="2023-10-02T19:58:53.756488426Z" level=info msg="StartContainer for \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\"" Oct 2 19:58:53.781554 systemd[1]: Started cri-containerd-ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919.scope. Oct 2 19:58:53.823755 systemd[1]: cri-containerd-ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919.scope: Deactivated successfully. Oct 2 19:58:53.842363 env[1634]: time="2023-10-02T19:58:53.842242650Z" level=info msg="shim disconnected" id=ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919 Oct 2 19:58:53.842363 env[1634]: time="2023-10-02T19:58:53.842360270Z" level=warning msg="cleaning up after shim disconnected" id=ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919 namespace=k8s.io Oct 2 19:58:53.842363 env[1634]: time="2023-10-02T19:58:53.842369340Z" level=info msg="cleaning up dead shim" Oct 2 19:58:53.865927 env[1634]: time="2023-10-02T19:58:53.865865432Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:58:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3876 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:58:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:58:53.866528 env[1634]: time="2023-10-02T19:58:53.866462426Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:58:53.880636 env[1634]: time="2023-10-02T19:58:53.880526529Z" level=error msg="Failed to pipe stdout of container \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\"" error="reading from a closed fifo" Oct 2 19:58:53.880905 env[1634]: time="2023-10-02T19:58:53.880563007Z" level=error msg="Failed to pipe stderr of container \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\"" error="reading from a closed fifo" Oct 2 19:58:53.895600 env[1634]: time="2023-10-02T19:58:53.895509324Z" level=error msg="StartContainer for \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:58:53.897148 kubelet[2747]: E1002 19:58:53.896535 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919" Oct 2 19:58:53.897148 kubelet[2747]: E1002 19:58:53.896651 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:58:53.897148 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:58:53.897148 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:58:53.897148 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgsbx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:58:53.897148 kubelet[2747]: E1002 19:58:53.896694 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:58:54.191429 systemd[1]: run-containerd-runc-k8s.io-8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a-runc.NrlbbL.mount: Deactivated successfully. Oct 2 19:58:54.731063 kubelet[2747]: I1002 19:58:54.730649 2747 scope.go:115] "RemoveContainer" containerID="f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310" Oct 2 19:58:54.731063 kubelet[2747]: I1002 19:58:54.731035 2747 scope.go:115] "RemoveContainer" containerID="f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310" Oct 2 19:58:54.732530 env[1634]: time="2023-10-02T19:58:54.732491601Z" level=info msg="RemoveContainer for \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\"" Oct 2 19:58:54.734154 env[1634]: time="2023-10-02T19:58:54.734111540Z" level=info msg="RemoveContainer for \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\"" Oct 2 19:58:54.734489 env[1634]: time="2023-10-02T19:58:54.734414102Z" level=error msg="RemoveContainer for \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\" failed" error="failed to set removing state for container \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\": container is already in removing state" Oct 2 19:58:54.734993 kubelet[2747]: E1002 19:58:54.734890 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\": container is already in removing state" containerID="f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310" Oct 2 19:58:54.735091 kubelet[2747]: E1002 19:58:54.735019 2747 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310": container is already in removing state; Skipping pod "cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)" Oct 2 19:58:54.735727 kubelet[2747]: E1002 19:58:54.735344 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:58:54.739485 env[1634]: time="2023-10-02T19:58:54.739154298Z" level=info msg="RemoveContainer for \"f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310\" returns successfully" Oct 2 19:58:55.058049 kubelet[2747]: E1002 19:58:55.057939 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:58:55.738192 amazon-ssm-agent[1617]: 2023-10-02 19:58:55 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:58:55.840134 amazon-ssm-agent[1617]: 2023-10-02 19:58:55 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-097e840664504e451 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-097e840664504e451 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:58:55.840134 amazon-ssm-agent[1617]: status code: 400, request id: b31a2f3f-e025-4b71-98bf-72c4460050fb Oct 2 19:58:56.651118 kubelet[2747]: W1002 19:58:56.651065 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9495ac30_3315_46c7_a89c_9717e166ee4d.slice/cri-containerd-f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310.scope WatchSource:0}: container "f7f47154538a9b08c914fb5e96de1daede537ee55a4e38a1721cff36b0cab310" in namespace "k8s.io": not found Oct 2 19:58:58.343000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.343000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002527240 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:58:58.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:58.343000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.343000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002527260 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:58:58.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:58.352000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.352000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002527280 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:58:58.352000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:58.354000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:58:58.354000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025272a0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:58:58.354000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:58:59.763866 kubelet[2747]: W1002 19:58:59.763822 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9495ac30_3315_46c7_a89c_9717e166ee4d.slice/cri-containerd-ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919.scope WatchSource:0}: task ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919 not found: not found Oct 2 19:59:00.059141 kubelet[2747]: E1002 19:59:00.058933 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:05.060486 kubelet[2747]: E1002 19:59:05.060450 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:07.859532 env[1634]: time="2023-10-02T19:59:07.859479038Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:59:07.881789 env[1634]: time="2023-10-02T19:59:07.881700875Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\"" Oct 2 19:59:07.882916 env[1634]: time="2023-10-02T19:59:07.882882174Z" level=info msg="StartContainer for \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\"" Oct 2 19:59:07.913911 systemd[1]: Started cri-containerd-79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330.scope. Oct 2 19:59:07.924787 systemd[1]: cri-containerd-79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330.scope: Deactivated successfully. Oct 2 19:59:07.929509 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330-rootfs.mount: Deactivated successfully. Oct 2 19:59:07.949387 env[1634]: time="2023-10-02T19:59:07.949321266Z" level=info msg="shim disconnected" id=79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330 Oct 2 19:59:07.949387 env[1634]: time="2023-10-02T19:59:07.949385450Z" level=warning msg="cleaning up after shim disconnected" id=79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330 namespace=k8s.io Oct 2 19:59:07.949387 env[1634]: time="2023-10-02T19:59:07.949398042Z" level=info msg="cleaning up dead shim" Oct 2 19:59:07.959025 env[1634]: time="2023-10-02T19:59:07.958964819Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3919 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:07Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:07.959371 env[1634]: time="2023-10-02T19:59:07.959254062Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:59:07.964395 env[1634]: time="2023-10-02T19:59:07.964320876Z" level=error msg="Failed to pipe stdout of container \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\"" error="reading from a closed fifo" Oct 2 19:59:07.964538 env[1634]: time="2023-10-02T19:59:07.964435751Z" level=error msg="Failed to pipe stderr of container \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\"" error="reading from a closed fifo" Oct 2 19:59:07.966847 env[1634]: time="2023-10-02T19:59:07.966796340Z" level=error msg="StartContainer for \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:07.967102 kubelet[2747]: E1002 19:59:07.967068 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330" Oct 2 19:59:07.968735 kubelet[2747]: E1002 19:59:07.968658 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:07.968735 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:07.968735 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:59:07.968735 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgsbx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:07.969141 kubelet[2747]: E1002 19:59:07.969040 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:59:08.766055 kubelet[2747]: I1002 19:59:08.765937 2747 scope.go:115] "RemoveContainer" containerID="ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919" Oct 2 19:59:08.766254 kubelet[2747]: I1002 19:59:08.766234 2747 scope.go:115] "RemoveContainer" containerID="ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919" Oct 2 19:59:08.768323 env[1634]: time="2023-10-02T19:59:08.768283691Z" level=info msg="RemoveContainer for \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\"" Oct 2 19:59:08.768916 env[1634]: time="2023-10-02T19:59:08.768881289Z" level=info msg="RemoveContainer for \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\"" Oct 2 19:59:08.769071 env[1634]: time="2023-10-02T19:59:08.768974489Z" level=error msg="RemoveContainer for \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\" failed" error="failed to set removing state for container \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\": container is already in removing state" Oct 2 19:59:08.769201 kubelet[2747]: E1002 19:59:08.769182 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\": container is already in removing state" containerID="ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919" Oct 2 19:59:08.769317 kubelet[2747]: E1002 19:59:08.769224 2747 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919": container is already in removing state; Skipping pod "cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)" Oct 2 19:59:08.769978 kubelet[2747]: E1002 19:59:08.769956 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:59:08.774351 env[1634]: time="2023-10-02T19:59:08.774302317Z" level=info msg="RemoveContainer for \"ee7b1069cd0258b0244fc63ddadaddd6bc3a9d5fb87fc6bb03e83550c802b919\" returns successfully" Oct 2 19:59:10.066840 kubelet[2747]: E1002 19:59:10.066810 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:11.054632 kubelet[2747]: W1002 19:59:11.054497 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9495ac30_3315_46c7_a89c_9717e166ee4d.slice/cri-containerd-79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330.scope WatchSource:0}: task 79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330 not found: not found Oct 2 19:59:15.073312 kubelet[2747]: E1002 19:59:15.073285 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:20.074907 kubelet[2747]: E1002 19:59:20.074858 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:20.857141 kubelet[2747]: E1002 19:59:20.857105 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:59:25.076123 kubelet[2747]: E1002 19:59:25.076083 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:30.078564 kubelet[2747]: E1002 19:59:30.078535 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:34.860369 env[1634]: time="2023-10-02T19:59:34.859675596Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:59:34.891711 env[1634]: time="2023-10-02T19:59:34.891659381Z" level=info msg="CreateContainer within sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\"" Oct 2 19:59:34.892751 env[1634]: time="2023-10-02T19:59:34.892686945Z" level=info msg="StartContainer for \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\"" Oct 2 19:59:34.929795 systemd[1]: run-containerd-runc-k8s.io-3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4-runc.N3nLHq.mount: Deactivated successfully. Oct 2 19:59:34.944250 systemd[1]: Started cri-containerd-3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4.scope. Oct 2 19:59:34.967557 systemd[1]: cri-containerd-3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4.scope: Deactivated successfully. Oct 2 19:59:34.990450 env[1634]: time="2023-10-02T19:59:34.990387401Z" level=info msg="shim disconnected" id=3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4 Oct 2 19:59:34.990807 env[1634]: time="2023-10-02T19:59:34.990783047Z" level=warning msg="cleaning up after shim disconnected" id=3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4 namespace=k8s.io Oct 2 19:59:34.991006 env[1634]: time="2023-10-02T19:59:34.990976839Z" level=info msg="cleaning up dead shim" Oct 2 19:59:35.014525 env[1634]: time="2023-10-02T19:59:35.014472872Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3958 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:59:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:59:35.015411 env[1634]: time="2023-10-02T19:59:35.015199571Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:59:35.016825 env[1634]: time="2023-10-02T19:59:35.015590815Z" level=error msg="Failed to pipe stdout of container \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\"" error="reading from a closed fifo" Oct 2 19:59:35.016958 env[1634]: time="2023-10-02T19:59:35.016382636Z" level=error msg="Failed to pipe stderr of container \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\"" error="reading from a closed fifo" Oct 2 19:59:35.018851 env[1634]: time="2023-10-02T19:59:35.018801235Z" level=error msg="StartContainer for \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:59:35.019142 kubelet[2747]: E1002 19:59:35.019087 2747 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4" Oct 2 19:59:35.020016 kubelet[2747]: E1002 19:59:35.019253 2747 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:59:35.020016 kubelet[2747]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:59:35.020016 kubelet[2747]: rm /hostbin/cilium-mount Oct 2 19:59:35.020016 kubelet[2747]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-rgsbx,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:59:35.020016 kubelet[2747]: E1002 19:59:35.019332 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:59:35.083675 kubelet[2747]: E1002 19:59:35.082952 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:35.839800 kubelet[2747]: I1002 19:59:35.839767 2747 scope.go:115] "RemoveContainer" containerID="79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330" Oct 2 19:59:35.840153 kubelet[2747]: I1002 19:59:35.840131 2747 scope.go:115] "RemoveContainer" containerID="79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330" Oct 2 19:59:35.841742 env[1634]: time="2023-10-02T19:59:35.841696808Z" level=info msg="RemoveContainer for \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\"" Oct 2 19:59:35.842398 env[1634]: time="2023-10-02T19:59:35.842370411Z" level=info msg="RemoveContainer for \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\"" Oct 2 19:59:35.842654 env[1634]: time="2023-10-02T19:59:35.842618085Z" level=error msg="RemoveContainer for \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\" failed" error="failed to set removing state for container \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\": container is already in removing state" Oct 2 19:59:35.842849 kubelet[2747]: E1002 19:59:35.842827 2747 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\": container is already in removing state" containerID="79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330" Oct 2 19:59:35.842939 kubelet[2747]: E1002 19:59:35.842868 2747 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330": container is already in removing state; Skipping pod "cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)" Oct 2 19:59:35.843254 kubelet[2747]: E1002 19:59:35.843236 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:59:35.848167 env[1634]: time="2023-10-02T19:59:35.848106161Z" level=info msg="RemoveContainer for \"79e4ceb86d3ddf1d40cc9010844bfcbe6b9f25308628cc58a574b1bf841d1330\" returns successfully" Oct 2 19:59:35.878053 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4-rootfs.mount: Deactivated successfully. Oct 2 19:59:38.105280 kubelet[2747]: W1002 19:59:38.105221 2747 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod9495ac30_3315_46c7_a89c_9717e166ee4d.slice/cri-containerd-3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4.scope WatchSource:0}: task 3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4 not found: not found Oct 2 19:59:39.651000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.652896 kernel: kauditd_printk_skb: 59 callbacks suppressed Oct 2 19:59:39.653044 kernel: audit: type=1400 audit(1696276779.651:1400): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.651000 audit[2519]: AVC avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.671292 kernel: audit: type=1400 audit(1696276779.651:1401): avc: denied { watch } for pid=2519 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:39.651000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fa1fc0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:59:39.697908 kernel: audit: type=1300 audit(1696276779.651:1401): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000fa1fc0 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:59:39.651000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.704986 kernel: audit: type=1327 audit(1696276779.651:1401): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.651000 audit[2519]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000eda630 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:59:39.651000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:39.720939 kernel: audit: type=1300 audit(1696276779.651:1400): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000eda630 a2=fc6 a3=0 items=0 ppid=2363 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c446,c666 key=(null) Oct 2 19:59:39.721232 kernel: audit: type=1327 audit(1696276779.651:1400): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:59:40.084674 kubelet[2747]: E1002 19:59:40.084647 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:41.248000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.248000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.255280 kernel: audit: type=1400 audit(1696276781.248:1402): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.255341 kernel: audit: type=1400 audit(1696276781.248:1403): avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.261354 kernel: audit: type=1300 audit(1696276781.248:1402): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010694b70 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:59:41.248000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c010694b70 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:59:41.248000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:59:41.274504 kernel: audit: type=1327 audit(1696276781.248:1402): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:59:41.248000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.248000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00ead0e00 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:59:41.248000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:59:41.248000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c01068b800 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:59:41.248000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:59:41.268000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.268000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c010694d20 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:59:41.268000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:59:41.275000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521007 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.275000 audit[2532]: AVC avc: denied { watch } for pid=2532 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:59:41.275000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c01068b830 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:59:41.275000 audit[2532]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00ead0f00 a2=fc6 a3=0 items=0 ppid=2413 pid=2532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c800,c812 key=(null) Oct 2 19:59:41.275000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:59:41.275000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32362E323137002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:59:44.850745 env[1634]: time="2023-10-02T19:59:44.850697124Z" level=info msg="StopPodSandbox for \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\"" Oct 2 19:59:44.851213 env[1634]: time="2023-10-02T19:59:44.850804565Z" level=info msg="TearDown network for sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" successfully" Oct 2 19:59:44.851213 env[1634]: time="2023-10-02T19:59:44.850848540Z" level=info msg="StopPodSandbox for \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" returns successfully" Oct 2 19:59:44.851528 env[1634]: time="2023-10-02T19:59:44.851500326Z" level=info msg="RemovePodSandbox for \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\"" Oct 2 19:59:44.851647 env[1634]: time="2023-10-02T19:59:44.851530913Z" level=info msg="Forcibly stopping sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\"" Oct 2 19:59:44.851647 env[1634]: time="2023-10-02T19:59:44.851619438Z" level=info msg="TearDown network for sandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" successfully" Oct 2 19:59:44.855765 env[1634]: time="2023-10-02T19:59:44.855728917Z" level=info msg="RemovePodSandbox \"a0909e5ffe2189bb9f1617caf105a41746d945a0efc0f20510d81f669449e9f8\" returns successfully" Oct 2 19:59:44.856647 env[1634]: time="2023-10-02T19:59:44.856476171Z" level=info msg="StopPodSandbox for \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\"" Oct 2 19:59:44.857146 env[1634]: time="2023-10-02T19:59:44.857014043Z" level=info msg="TearDown network for sandbox \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" successfully" Oct 2 19:59:44.857274 env[1634]: time="2023-10-02T19:59:44.857144800Z" level=info msg="StopPodSandbox for \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" returns successfully" Oct 2 19:59:44.858985 env[1634]: time="2023-10-02T19:59:44.858959063Z" level=info msg="RemovePodSandbox for \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\"" Oct 2 19:59:44.859186 env[1634]: time="2023-10-02T19:59:44.859136648Z" level=info msg="Forcibly stopping sandbox \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\"" Oct 2 19:59:44.859280 env[1634]: time="2023-10-02T19:59:44.859246132Z" level=info msg="TearDown network for sandbox \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" successfully" Oct 2 19:59:44.864139 env[1634]: time="2023-10-02T19:59:44.864101035Z" level=info msg="RemovePodSandbox \"0255ccc5ac1b9ca73cf32be8f65dfa867cc43e5b07e7dc4226b8f7f51d990512\" returns successfully" Oct 2 19:59:45.086359 kubelet[2747]: E1002 19:59:45.086327 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:49.857560 kubelet[2747]: E1002 19:59:49.857529 2747 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2vbw6_kube-system(9495ac30-3315-46c7-a89c-9717e166ee4d)\"" pod="kube-system/cilium-2vbw6" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d Oct 2 19:59:50.087240 kubelet[2747]: E1002 19:59:50.087199 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:59:53.131185 env[1634]: time="2023-10-02T19:59:53.130883224Z" level=info msg="StopPodSandbox for \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\"" Oct 2 19:59:53.131185 env[1634]: time="2023-10-02T19:59:53.130971317Z" level=info msg="Container to stop \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:59:53.136098 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a-shm.mount: Deactivated successfully. Oct 2 19:59:53.152000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:59:53.152411 systemd[1]: cri-containerd-8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a.scope: Deactivated successfully. Oct 2 19:59:53.154379 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:59:53.154485 kernel: audit: type=1334 audit(1696276793.152:1408): prog-id=134 op=UNLOAD Oct 2 19:59:53.157000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:59:53.160297 kernel: audit: type=1334 audit(1696276793.157:1409): prog-id=137 op=UNLOAD Oct 2 19:59:53.207199 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a-rootfs.mount: Deactivated successfully. Oct 2 19:59:53.238562 env[1634]: time="2023-10-02T19:59:53.238506367Z" level=info msg="shim disconnected" id=8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a Oct 2 19:59:53.239005 env[1634]: time="2023-10-02T19:59:53.238970535Z" level=warning msg="cleaning up after shim disconnected" id=8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a namespace=k8s.io Oct 2 19:59:53.239005 env[1634]: time="2023-10-02T19:59:53.238996596Z" level=info msg="cleaning up dead shim" Oct 2 19:59:53.252062 env[1634]: time="2023-10-02T19:59:53.252009199Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:59:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3992 runtime=io.containerd.runc.v2\n" Oct 2 19:59:53.252402 env[1634]: time="2023-10-02T19:59:53.252364248Z" level=info msg="TearDown network for sandbox \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" successfully" Oct 2 19:59:53.252508 env[1634]: time="2023-10-02T19:59:53.252399069Z" level=info msg="StopPodSandbox for \"8f14dd4a378835a20bd4fdc066f2b2500112c53d86b4ad255638d033a698ff3a\" returns successfully" Oct 2 19:59:53.257240 sshd[3758]: pam_unix(sshd:session): session closed for user core Oct 2 19:59:53.269782 kernel: audit: type=1106 audit(1696276793.259:1410): pid=3758 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:53.269867 kernel: audit: type=1104 audit(1696276793.264:1411): pid=3758 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:53.259000 audit[3758]: USER_END pid=3758 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:53.264000 audit[3758]: CRED_DISP pid=3758 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:59:53.266621 systemd[1]: sshd@29-172.31.26.217:22-139.178.89.65:60260.service: Deactivated successfully. Oct 2 19:59:53.268958 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:59:53.269200 systemd[1]: session-30.scope: Consumed 1.326s CPU time. Oct 2 19:59:53.277799 kernel: audit: type=1131 audit(1696276793.266:1412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.26.217:22-139.178.89.65:60260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:53.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.26.217:22-139.178.89.65:60260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:59:53.271819 systemd-logind[1629]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:59:53.278931 systemd-logind[1629]: Removed session 30. Oct 2 19:59:53.384224 kubelet[2747]: I1002 19:59:53.384104 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-config-path\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.384710 kubelet[2747]: W1002 19:59:53.384423 2747 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/9495ac30-3315-46c7-a89c-9717e166ee4d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:59:53.384710 kubelet[2747]: I1002 19:59:53.384645 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-ipsec-secrets\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.384831 kubelet[2747]: I1002 19:59:53.384779 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-kernel\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.384831 kubelet[2747]: I1002 19:59:53.384814 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-hubble-tls\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.385229 kubelet[2747]: I1002 19:59:53.385192 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cni-path\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.385336 kubelet[2747]: I1002 19:59:53.385252 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-rgsbx\" (UniqueName: \"kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-kube-api-access-rgsbx\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.385336 kubelet[2747]: I1002 19:59:53.385298 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-net\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.385336 kubelet[2747]: I1002 19:59:53.385334 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-run\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.385476 kubelet[2747]: I1002 19:59:53.385376 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-bpf-maps\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.385476 kubelet[2747]: I1002 19:59:53.385403 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-hostproc\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.388688 kubelet[2747]: I1002 19:59:53.388453 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-xtables-lock\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.388879 kubelet[2747]: I1002 19:59:53.388719 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-cgroup\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.388879 kubelet[2747]: I1002 19:59:53.388748 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-lib-modules\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.388879 kubelet[2747]: I1002 19:59:53.388775 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-etc-cni-netd\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.388879 kubelet[2747]: I1002 19:59:53.388806 2747 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-clustermesh-secrets\") pod \"9495ac30-3315-46c7-a89c-9717e166ee4d\" (UID: \"9495ac30-3315-46c7-a89c-9717e166ee4d\") " Oct 2 19:59:53.389179 kubelet[2747]: I1002 19:59:53.389138 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.390077 kubelet[2747]: I1002 19:59:53.389634 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cni-path" (OuterVolumeSpecName: "cni-path") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.390974 kubelet[2747]: I1002 19:59:53.390550 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.391094 kubelet[2747]: I1002 19:59:53.390984 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.391094 kubelet[2747]: I1002 19:59:53.391021 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.391094 kubelet[2747]: I1002 19:59:53.391061 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-hostproc" (OuterVolumeSpecName: "hostproc") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.391094 kubelet[2747]: I1002 19:59:53.391084 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.391329 kubelet[2747]: I1002 19:59:53.391109 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.391329 kubelet[2747]: I1002 19:59:53.391130 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.391329 kubelet[2747]: I1002 19:59:53.391151 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:59:53.400610 kubelet[2747]: I1002 19:59:53.400473 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:59:53.408619 systemd[1]: var-lib-kubelet-pods-9495ac30\x2d3315\x2d46c7\x2da89c\x2d9717e166ee4d-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:59:53.408767 systemd[1]: var-lib-kubelet-pods-9495ac30\x2d3315\x2d46c7\x2da89c\x2d9717e166ee4d-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:59:53.413167 kubelet[2747]: I1002 19:59:53.413128 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:59:53.413544 kubelet[2747]: I1002 19:59:53.413514 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:59:53.422431 kubelet[2747]: I1002 19:59:53.415203 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:53.422431 kubelet[2747]: I1002 19:59:53.421707 2747 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-kube-api-access-rgsbx" (OuterVolumeSpecName: "kube-api-access-rgsbx") pod "9495ac30-3315-46c7-a89c-9717e166ee4d" (UID: "9495ac30-3315-46c7-a89c-9717e166ee4d"). InnerVolumeSpecName "kube-api-access-rgsbx". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:59:53.418149 systemd[1]: var-lib-kubelet-pods-9495ac30\x2d3315\x2d46c7\x2da89c\x2d9717e166ee4d-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:59:53.424032 systemd[1]: var-lib-kubelet-pods-9495ac30\x2d3315\x2d46c7\x2da89c\x2d9717e166ee4d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2drgsbx.mount: Deactivated successfully. Oct 2 19:59:53.489892 kubelet[2747]: I1002 19:59:53.489851 2747 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-net\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.489892 kubelet[2747]: I1002 19:59:53.489902 2747 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-bpf-maps\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.489917 2747 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-hostproc\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.489930 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-run\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.489991 2747 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-xtables-lock\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490013 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-cgroup\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490026 2747 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-lib-modules\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490039 2747 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-etc-cni-netd\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490058 2747 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-clustermesh-secrets\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490071 2747 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-cni-path\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490085 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-config-path\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490099 2747 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/9495ac30-3315-46c7-a89c-9717e166ee4d-cilium-ipsec-secrets\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490112 2747 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/9495ac30-3315-46c7-a89c-9717e166ee4d-host-proc-sys-kernel\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490131 2747 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-hubble-tls\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.490230 kubelet[2747]: I1002 19:59:53.490147 2747 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-rgsbx\" (UniqueName: \"kubernetes.io/projected/9495ac30-3315-46c7-a89c-9717e166ee4d-kube-api-access-rgsbx\") on node \"ip-172-31-26-217\" DevicePath \"\"" Oct 2 19:59:53.904388 kubelet[2747]: I1002 19:59:53.904359 2747 scope.go:115] "RemoveContainer" containerID="3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4" Oct 2 19:59:53.910879 systemd[1]: Removed slice kubepods-burstable-pod9495ac30_3315_46c7_a89c_9717e166ee4d.slice. Oct 2 19:59:53.912758 env[1634]: time="2023-10-02T19:59:53.912716532Z" level=info msg="RemoveContainer for \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\"" Oct 2 19:59:53.918084 env[1634]: time="2023-10-02T19:59:53.917935429Z" level=info msg="RemoveContainer for \"3ffb0171880975600766cefae6ec8a0f23cd27c15676bdea64da98cfcfbe82d4\" returns successfully" Oct 2 19:59:54.864614 kubelet[2747]: I1002 19:59:54.864575 2747 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=9495ac30-3315-46c7-a89c-9717e166ee4d path="/var/lib/kubelet/pods/9495ac30-3315-46c7-a89c-9717e166ee4d/volumes" Oct 2 19:59:55.089613 kubelet[2747]: E1002 19:59:55.089584 2747 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"