Oct 2 20:05:18.241258 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:05:18.241295 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:18.241312 kernel: BIOS-provided physical RAM map: Oct 2 20:05:18.241324 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 20:05:18.241335 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 20:05:18.241346 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 20:05:18.241381 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 20:05:18.241393 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 20:05:18.241406 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 20:05:18.241418 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 20:05:18.241430 kernel: NX (Execute Disable) protection: active Oct 2 20:05:18.241442 kernel: SMBIOS 2.7 present. Oct 2 20:05:18.241454 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 20:05:18.241466 kernel: Hypervisor detected: KVM Oct 2 20:05:18.241484 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 20:05:18.241498 kernel: kvm-clock: cpu 0, msr 72f8a001, primary cpu clock Oct 2 20:05:18.241510 kernel: kvm-clock: using sched offset of 6100734948 cycles Oct 2 20:05:18.241618 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 20:05:18.241634 kernel: tsc: Detected 2499.996 MHz processor Oct 2 20:05:18.241648 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:05:18.241665 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:05:18.241678 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 20:05:18.241691 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:05:18.241704 kernel: Using GB pages for direct mapping Oct 2 20:05:18.241717 kernel: ACPI: Early table checksum verification disabled Oct 2 20:05:18.241729 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 20:05:18.241742 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 20:05:18.241755 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 20:05:18.241767 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 20:05:18.241783 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 20:05:18.241796 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:18.241809 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 20:05:18.241822 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 20:05:18.241835 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 20:05:18.241848 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 20:05:18.241963 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 20:05:18.241977 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:18.241995 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 20:05:18.242008 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 20:05:18.242022 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 20:05:18.242041 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 20:05:18.242055 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 20:05:18.242068 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 20:05:18.242082 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 20:05:18.242098 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 20:05:18.242167 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 20:05:18.242184 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 20:05:18.242198 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:05:18.242212 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:05:18.242226 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 20:05:18.242240 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 20:05:18.242253 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 20:05:18.242270 kernel: Zone ranges: Oct 2 20:05:18.242284 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:05:18.242298 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 20:05:18.242312 kernel: Normal empty Oct 2 20:05:18.242326 kernel: Movable zone start for each node Oct 2 20:05:18.242339 kernel: Early memory node ranges Oct 2 20:05:18.242380 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 20:05:18.242395 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 20:05:18.242408 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 20:05:18.242425 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:05:18.242477 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 20:05:18.244166 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 20:05:18.244190 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 20:05:18.244207 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 20:05:18.244223 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 20:05:18.244240 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 20:05:18.244256 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:05:18.244272 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 20:05:18.244294 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 20:05:18.244310 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:05:18.244326 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 20:05:18.244342 kernel: TSC deadline timer available Oct 2 20:05:18.244453 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:05:18.244471 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 20:05:18.244487 kernel: Booting paravirtualized kernel on KVM Oct 2 20:05:18.244522 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:05:18.244551 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:05:18.244569 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:05:18.244583 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:05:18.244597 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:05:18.244611 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 20:05:18.244625 kernel: kvm-guest: PV spinlocks enabled Oct 2 20:05:18.244639 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:05:18.244649 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 20:05:18.244661 kernel: Policy zone: DMA32 Oct 2 20:05:18.244676 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:18.244693 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:05:18.244706 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:05:18.244719 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:05:18.244731 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:05:18.244746 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 20:05:18.244760 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:05:18.244774 kernel: Kernel/User page tables isolation: enabled Oct 2 20:05:18.244788 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:05:18.244805 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:05:18.244820 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:05:18.244835 kernel: rcu: RCU event tracing is enabled. Oct 2 20:05:18.244849 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:05:18.244864 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:05:18.244877 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:05:18.244891 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:05:18.244905 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:05:18.244919 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 20:05:18.244936 kernel: random: crng init done Oct 2 20:05:18.244949 kernel: Console: colour VGA+ 80x25 Oct 2 20:05:18.244963 kernel: printk: console [ttyS0] enabled Oct 2 20:05:18.244977 kernel: ACPI: Core revision 20210730 Oct 2 20:05:18.244991 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 20:05:18.245005 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:05:18.245019 kernel: x2apic enabled Oct 2 20:05:18.245033 kernel: Switched APIC routing to physical x2apic. Oct 2 20:05:18.245047 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Oct 2 20:05:18.245064 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499996) Oct 2 20:05:18.245078 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:05:18.245092 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:05:18.245107 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:05:18.245131 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:05:18.245148 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:05:18.245162 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:05:18.245177 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:05:18.245192 kernel: RETBleed: Vulnerable Oct 2 20:05:18.245206 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:05:18.245220 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:18.245234 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:18.245248 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:05:18.245263 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:05:18.245280 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:05:18.245295 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:05:18.245309 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 20:05:18.245324 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 20:05:18.245338 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:05:18.245373 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:05:18.245390 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:05:18.245405 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 20:05:18.245420 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:05:18.245434 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 20:05:18.245449 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 20:05:18.245463 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 20:05:18.245478 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 20:05:18.245492 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 20:05:18.245506 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 20:05:18.245521 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 20:05:18.245535 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:05:18.245551 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:05:18.245566 kernel: LSM: Security Framework initializing Oct 2 20:05:18.245581 kernel: SELinux: Initializing. Oct 2 20:05:18.245595 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:18.245610 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:18.245625 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:05:18.245640 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:05:18.245656 kernel: signal: max sigframe size: 3632 Oct 2 20:05:18.245671 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:05:18.245686 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:05:18.245704 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:05:18.245719 kernel: x86: Booting SMP configuration: Oct 2 20:05:18.245734 kernel: .... node #0, CPUs: #1 Oct 2 20:05:18.245749 kernel: kvm-clock: cpu 1, msr 72f8a041, secondary cpu clock Oct 2 20:05:18.245764 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 20:05:18.245779 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 20:05:18.245796 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:05:18.245811 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:05:18.245826 kernel: smpboot: Max logical packages: 1 Oct 2 20:05:18.245844 kernel: smpboot: Total of 2 processors activated (9999.98 BogoMIPS) Oct 2 20:05:18.245859 kernel: devtmpfs: initialized Oct 2 20:05:18.245874 kernel: x86/mm: Memory block size: 128MB Oct 2 20:05:18.245889 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:05:18.245905 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:05:18.245920 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:05:18.245935 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:05:18.245951 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:05:18.245966 kernel: audit: type=2000 audit(1696277117.207:1): state=initialized audit_enabled=0 res=1 Oct 2 20:05:18.245984 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:05:18.245999 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:05:18.246015 kernel: cpuidle: using governor menu Oct 2 20:05:18.246029 kernel: ACPI: bus type PCI registered Oct 2 20:05:18.246044 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:05:18.246059 kernel: dca service started, version 1.12.1 Oct 2 20:05:18.246074 kernel: PCI: Using configuration type 1 for base access Oct 2 20:05:18.246089 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:05:18.246105 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:05:18.246123 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:05:18.246138 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:05:18.246153 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:05:18.246168 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:05:18.246181 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:05:18.246195 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:05:18.246210 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:05:18.246225 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:05:18.246240 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 20:05:18.246258 kernel: ACPI: Interpreter enabled Oct 2 20:05:18.246273 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:05:18.246288 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:05:18.246303 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:05:18.246319 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 20:05:18.246334 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:05:18.246545 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:05:18.246684 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 20:05:18.246705 kernel: acpiphp: Slot [3] registered Oct 2 20:05:18.246720 kernel: acpiphp: Slot [4] registered Oct 2 20:05:18.246733 kernel: acpiphp: Slot [5] registered Oct 2 20:05:18.246745 kernel: acpiphp: Slot [6] registered Oct 2 20:05:18.246759 kernel: acpiphp: Slot [7] registered Oct 2 20:05:18.246773 kernel: acpiphp: Slot [8] registered Oct 2 20:05:18.246786 kernel: acpiphp: Slot [9] registered Oct 2 20:05:18.246800 kernel: acpiphp: Slot [10] registered Oct 2 20:05:18.246813 kernel: acpiphp: Slot [11] registered Oct 2 20:05:18.246830 kernel: acpiphp: Slot [12] registered Oct 2 20:05:18.246843 kernel: acpiphp: Slot [13] registered Oct 2 20:05:18.246912 kernel: acpiphp: Slot [14] registered Oct 2 20:05:18.246930 kernel: acpiphp: Slot [15] registered Oct 2 20:05:18.246945 kernel: acpiphp: Slot [16] registered Oct 2 20:05:18.246958 kernel: acpiphp: Slot [17] registered Oct 2 20:05:18.246972 kernel: acpiphp: Slot [18] registered Oct 2 20:05:18.246987 kernel: acpiphp: Slot [19] registered Oct 2 20:05:18.247002 kernel: acpiphp: Slot [20] registered Oct 2 20:05:18.247018 kernel: acpiphp: Slot [21] registered Oct 2 20:05:18.247032 kernel: acpiphp: Slot [22] registered Oct 2 20:05:18.247044 kernel: acpiphp: Slot [23] registered Oct 2 20:05:18.247055 kernel: acpiphp: Slot [24] registered Oct 2 20:05:18.247068 kernel: acpiphp: Slot [25] registered Oct 2 20:05:18.247080 kernel: acpiphp: Slot [26] registered Oct 2 20:05:18.247093 kernel: acpiphp: Slot [27] registered Oct 2 20:05:18.247104 kernel: acpiphp: Slot [28] registered Oct 2 20:05:18.247116 kernel: acpiphp: Slot [29] registered Oct 2 20:05:18.247129 kernel: acpiphp: Slot [30] registered Oct 2 20:05:18.247145 kernel: acpiphp: Slot [31] registered Oct 2 20:05:18.247157 kernel: PCI host bridge to bus 0000:00 Oct 2 20:05:18.247296 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 20:05:18.247427 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 20:05:18.247537 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 20:05:18.247647 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 20:05:18.247758 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:05:18.247901 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 20:05:18.248038 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 20:05:18.248179 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 20:05:18.248308 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 20:05:18.248449 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 20:05:18.248576 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 20:05:18.248701 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 20:05:18.248944 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 20:05:18.249075 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 20:05:18.249203 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 20:05:18.249330 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 20:05:18.249491 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 20:05:18.249617 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 20:05:18.249736 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 20:05:18.249860 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 20:05:18.249983 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 20:05:18.250100 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 20:05:18.250227 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 20:05:18.250346 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 20:05:18.250374 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 20:05:18.250391 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 20:05:18.250405 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 20:05:18.250418 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 20:05:18.251860 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 20:05:18.251882 kernel: iommu: Default domain type: Translated Oct 2 20:05:18.251899 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:05:18.252082 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 20:05:18.252224 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 20:05:18.252371 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 20:05:18.252397 kernel: vgaarb: loaded Oct 2 20:05:18.252413 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:05:18.252428 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:05:18.252452 kernel: PTP clock support registered Oct 2 20:05:18.252466 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:05:18.252479 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 20:05:18.252492 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 20:05:18.252506 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 20:05:18.252574 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 20:05:18.252589 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 20:05:18.252601 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 20:05:18.252614 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:05:18.252627 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:05:18.252641 kernel: pnp: PnP ACPI init Oct 2 20:05:18.252655 kernel: pnp: PnP ACPI: found 5 devices Oct 2 20:05:18.252670 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:05:18.252683 kernel: NET: Registered PF_INET protocol family Oct 2 20:05:18.252699 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:05:18.252713 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 20:05:18.252726 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:05:18.252739 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:05:18.252754 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 20:05:18.252768 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 20:05:18.252783 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:18.252798 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:18.252813 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:05:18.252830 kernel: NET: Registered PF_XDP protocol family Oct 2 20:05:18.252962 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 20:05:18.253163 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 20:05:18.253285 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 20:05:18.253439 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 20:05:18.253575 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 20:05:18.253808 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 20:05:18.253836 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:05:18.253852 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:05:18.253868 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Oct 2 20:05:18.253883 kernel: clocksource: Switched to clocksource tsc Oct 2 20:05:18.253898 kernel: Initialise system trusted keyrings Oct 2 20:05:18.253913 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 20:05:18.253928 kernel: Key type asymmetric registered Oct 2 20:05:18.253942 kernel: Asymmetric key parser 'x509' registered Oct 2 20:05:18.253957 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:05:18.253976 kernel: io scheduler mq-deadline registered Oct 2 20:05:18.254056 kernel: io scheduler kyber registered Oct 2 20:05:18.254072 kernel: io scheduler bfq registered Oct 2 20:05:18.254088 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:05:18.254103 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:05:18.254117 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:05:18.254181 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 20:05:18.254198 kernel: i8042: Warning: Keylock active Oct 2 20:05:18.254213 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 20:05:18.254232 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 20:05:18.254394 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 20:05:18.254516 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 20:05:18.254652 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T20:05:17 UTC (1696277117) Oct 2 20:05:18.254772 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 20:05:18.254791 kernel: intel_pstate: CPU model not supported Oct 2 20:05:18.254808 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:05:18.254823 kernel: Segment Routing with IPv6 Oct 2 20:05:18.254842 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:05:18.254917 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:05:18.254935 kernel: Key type dns_resolver registered Oct 2 20:05:18.254949 kernel: IPI shorthand broadcast: enabled Oct 2 20:05:18.254964 kernel: sched_clock: Marking stable (508925795, 309905814)->(1071337942, -252506333) Oct 2 20:05:18.254979 kernel: registered taskstats version 1 Oct 2 20:05:18.254994 kernel: Loading compiled-in X.509 certificates Oct 2 20:05:18.255009 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:05:18.255024 kernel: Key type .fscrypt registered Oct 2 20:05:18.255043 kernel: Key type fscrypt-provisioning registered Oct 2 20:05:18.255059 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:05:18.255074 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:05:18.255089 kernel: ima: No architecture policies found Oct 2 20:05:18.255104 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:05:18.255120 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:05:18.255136 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:05:18.255150 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:05:18.255165 kernel: Run /init as init process Oct 2 20:05:18.255183 kernel: with arguments: Oct 2 20:05:18.255198 kernel: /init Oct 2 20:05:18.255213 kernel: with environment: Oct 2 20:05:18.255228 kernel: HOME=/ Oct 2 20:05:18.255242 kernel: TERM=linux Oct 2 20:05:18.255257 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:05:18.255276 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:18.255295 systemd[1]: Detected virtualization amazon. Oct 2 20:05:18.255314 systemd[1]: Detected architecture x86-64. Oct 2 20:05:18.255329 systemd[1]: Running in initrd. Oct 2 20:05:18.255344 systemd[1]: No hostname configured, using default hostname. Oct 2 20:05:18.255371 systemd[1]: Hostname set to . Oct 2 20:05:18.255405 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:18.255424 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 20:05:18.255441 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:05:18.255457 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:18.255473 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:18.255489 systemd[1]: Reached target paths.target. Oct 2 20:05:18.255505 systemd[1]: Reached target slices.target. Oct 2 20:05:18.255521 systemd[1]: Reached target swap.target. Oct 2 20:05:18.255537 systemd[1]: Reached target timers.target. Oct 2 20:05:18.255558 systemd[1]: Listening on iscsid.socket. Oct 2 20:05:18.255574 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:05:18.255591 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:05:18.255607 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:05:18.255624 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:05:18.255640 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:18.255656 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:18.255673 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:18.255690 systemd[1]: Reached target sockets.target. Oct 2 20:05:18.255709 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:18.255729 systemd[1]: Finished network-cleanup.service. Oct 2 20:05:18.255745 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:05:18.255762 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:18.255778 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:18.255794 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:18.255811 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:05:18.255839 systemd-journald[185]: Journal started Oct 2 20:05:18.255917 systemd-journald[185]: Runtime Journal (/run/log/journal/ec24bde77e4f7da09d91d3e820cb2ddb) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:18.269070 systemd[1]: Started systemd-journald.service. Oct 2 20:05:18.263402 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:18.297575 kernel: audit: type=1130 audit(1696277118.261:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.297642 kernel: audit: type=1130 audit(1696277118.263:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.297662 kernel: audit: type=1130 audit(1696277118.264:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.264926 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:05:18.338467 kernel: audit: type=1130 audit(1696277118.297:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.267499 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:05:18.492339 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:05:18.492394 kernel: Bridge firewalling registered Oct 2 20:05:18.492409 kernel: SCSI subsystem initialized Oct 2 20:05:18.492420 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:05:18.492432 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:05:18.492443 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:05:18.492456 kernel: audit: type=1130 audit(1696277118.484:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.291497 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:05:18.310272 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 20:05:18.501930 kernel: audit: type=1130 audit(1696277118.493:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.493000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.341787 systemd-resolved[187]: Positive Trust Anchors: Oct 2 20:05:18.513242 kernel: audit: type=1130 audit(1696277118.501:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.341805 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:18.341854 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:18.355597 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 20:05:18.356929 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:18.366731 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 20:05:18.418493 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 20:05:18.486254 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:18.495536 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:05:18.503403 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:18.514557 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:05:18.546024 kernel: audit: type=1130 audit(1696277118.537:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.520228 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:18.538678 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:18.565023 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:05:18.567188 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:05:18.576983 kernel: audit: type=1130 audit(1696277118.563:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.582424 dracut-cmdline[206]: dracut-dracut-053 Oct 2 20:05:18.585590 dracut-cmdline[206]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:18.670376 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:05:18.688379 kernel: iscsi: registered transport (tcp) Oct 2 20:05:18.717805 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:05:18.717883 kernel: QLogic iSCSI HBA Driver Oct 2 20:05:18.760279 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:05:18.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:18.763536 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:05:18.820376 kernel: raid6: avx512x4 gen() 14430 MB/s Oct 2 20:05:18.837376 kernel: raid6: avx512x4 xor() 6592 MB/s Oct 2 20:05:18.854378 kernel: raid6: avx512x2 gen() 16311 MB/s Oct 2 20:05:18.871379 kernel: raid6: avx512x2 xor() 22393 MB/s Oct 2 20:05:18.889458 kernel: raid6: avx512x1 gen() 16007 MB/s Oct 2 20:05:18.907386 kernel: raid6: avx512x1 xor() 20389 MB/s Oct 2 20:05:18.925381 kernel: raid6: avx2x4 gen() 14034 MB/s Oct 2 20:05:18.943381 kernel: raid6: avx2x4 xor() 5351 MB/s Oct 2 20:05:18.963990 kernel: raid6: avx2x2 gen() 16542 MB/s Oct 2 20:05:18.980380 kernel: raid6: avx2x2 xor() 11915 MB/s Oct 2 20:05:18.997380 kernel: raid6: avx2x1 gen() 11578 MB/s Oct 2 20:05:19.014399 kernel: raid6: avx2x1 xor() 12667 MB/s Oct 2 20:05:19.034491 kernel: raid6: sse2x4 gen() 5557 MB/s Oct 2 20:05:19.052378 kernel: raid6: sse2x4 xor() 4155 MB/s Oct 2 20:05:19.070381 kernel: raid6: sse2x2 gen() 6553 MB/s Oct 2 20:05:19.088380 kernel: raid6: sse2x2 xor() 5343 MB/s Oct 2 20:05:19.107383 kernel: raid6: sse2x1 gen() 8479 MB/s Oct 2 20:05:19.125571 kernel: raid6: sse2x1 xor() 3539 MB/s Oct 2 20:05:19.125646 kernel: raid6: using algorithm avx2x2 gen() 16542 MB/s Oct 2 20:05:19.125693 kernel: raid6: .... xor() 11915 MB/s, rmw enabled Oct 2 20:05:19.126820 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:05:19.143417 kernel: xor: automatically using best checksumming function avx Oct 2 20:05:19.269380 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:05:19.282452 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:05:19.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.285000 audit: BPF prog-id=7 op=LOAD Oct 2 20:05:19.285000 audit: BPF prog-id=8 op=LOAD Oct 2 20:05:19.287669 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:19.305588 systemd-udevd[383]: Using default interface naming scheme 'v252'. Oct 2 20:05:19.313095 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:19.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.320239 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:05:19.353233 dracut-pre-trigger[391]: rd.md=0: removing MD RAID activation Oct 2 20:05:19.390659 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:05:19.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.393691 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:19.450650 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:19.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.515376 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:05:19.530843 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 20:05:19.531075 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 20:05:19.539435 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 20:05:19.545376 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:0e:1a:ab:42:bd Oct 2 20:05:19.546638 (udev-worker)[430]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:19.824515 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:05:19.824550 kernel: AES CTR mode by8 optimization enabled Oct 2 20:05:19.824569 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 20:05:19.824791 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 20:05:19.824810 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 20:05:19.824939 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 20:05:19.824957 kernel: GPT:9289727 != 16777215 Oct 2 20:05:19.824974 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 20:05:19.824991 kernel: GPT:9289727 != 16777215 Oct 2 20:05:19.825007 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 20:05:19.825023 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:19.825040 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (437) Oct 2 20:05:19.718887 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:05:19.832214 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:19.840292 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:05:19.840547 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:05:19.869501 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:05:19.876943 systemd[1]: Starting disk-uuid.service... Oct 2 20:05:19.885847 disk-uuid[582]: Primary Header is updated. Oct 2 20:05:19.885847 disk-uuid[582]: Secondary Entries is updated. Oct 2 20:05:19.885847 disk-uuid[582]: Secondary Header is updated. Oct 2 20:05:19.893445 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:19.898371 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:19.904382 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:20.902806 disk-uuid[583]: The operation has completed successfully. Oct 2 20:05:20.904292 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:21.025906 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:05:21.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.026017 systemd[1]: Finished disk-uuid.service. Oct 2 20:05:21.035475 systemd[1]: Starting verity-setup.service... Oct 2 20:05:21.060375 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:05:21.132510 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:05:21.135003 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:05:21.137378 systemd[1]: Finished verity-setup.service. Oct 2 20:05:21.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.220373 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:05:21.220254 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:05:21.221409 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:05:21.222366 systemd[1]: Starting ignition-setup.service... Oct 2 20:05:21.227424 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:05:21.258230 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:21.258304 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:21.258323 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:21.273382 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:21.289562 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:05:21.312216 systemd[1]: Finished ignition-setup.service. Oct 2 20:05:21.315029 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:05:21.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.336726 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:05:21.336000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.337000 audit: BPF prog-id=9 op=LOAD Oct 2 20:05:21.339631 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:21.365714 systemd-networkd[1095]: lo: Link UP Oct 2 20:05:21.365726 systemd-networkd[1095]: lo: Gained carrier Oct 2 20:05:21.368056 systemd-networkd[1095]: Enumeration completed Oct 2 20:05:21.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.368192 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:21.369527 systemd[1]: Reached target network.target. Oct 2 20:05:21.371460 systemd-networkd[1095]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:21.372647 systemd[1]: Starting iscsiuio.service... Oct 2 20:05:21.385716 systemd[1]: Started iscsiuio.service. Oct 2 20:05:21.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.389151 systemd[1]: Starting iscsid.service... Oct 2 20:05:21.394563 systemd-networkd[1095]: eth0: Link UP Oct 2 20:05:21.394705 systemd-networkd[1095]: eth0: Gained carrier Oct 2 20:05:21.397171 iscsid[1100]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:21.397171 iscsid[1100]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:05:21.397171 iscsid[1100]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:05:21.397171 iscsid[1100]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:05:21.397171 iscsid[1100]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:21.397171 iscsid[1100]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:05:21.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.401270 systemd[1]: Started iscsid.service. Oct 2 20:05:21.409076 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:05:21.426324 systemd-networkd[1095]: eth0: DHCPv4 address 172.31.30.99/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:21.439619 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:05:21.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:21.443457 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:05:21.444998 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:21.446527 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:21.448634 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:05:21.466951 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:05:21.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.225655 ignition[1077]: Ignition 2.14.0 Oct 2 20:05:22.225670 ignition[1077]: Stage: fetch-offline Oct 2 20:05:22.225810 ignition[1077]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:22.225852 ignition[1077]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:22.246039 ignition[1077]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:22.246614 ignition[1077]: Ignition finished successfully Oct 2 20:05:22.249373 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:05:22.259738 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:05:22.259774 kernel: audit: type=1130 audit(1696277122.250:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.252971 systemd[1]: Starting ignition-fetch.service... Oct 2 20:05:22.264947 ignition[1119]: Ignition 2.14.0 Oct 2 20:05:22.264959 ignition[1119]: Stage: fetch Oct 2 20:05:22.265113 ignition[1119]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:22.265134 ignition[1119]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:22.273608 ignition[1119]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:22.275050 ignition[1119]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:22.283050 ignition[1119]: INFO : PUT result: OK Oct 2 20:05:22.286168 ignition[1119]: DEBUG : parsed url from cmdline: "" Oct 2 20:05:22.286168 ignition[1119]: INFO : no config URL provided Oct 2 20:05:22.286168 ignition[1119]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:05:22.286168 ignition[1119]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 20:05:22.292818 ignition[1119]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:22.294773 ignition[1119]: INFO : PUT result: OK Oct 2 20:05:22.295721 ignition[1119]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 20:05:22.297516 ignition[1119]: INFO : GET result: OK Oct 2 20:05:22.298589 ignition[1119]: DEBUG : parsing config with SHA512: 50cadd22575de5357890a8972fed41ce3ed5e273b40cc8271950d45aa671b4810ad8b92561a0e7f3975c785016e6e3418c90b6016a96ad7f82ce217dc2786361 Oct 2 20:05:22.340222 unknown[1119]: fetched base config from "system" Oct 2 20:05:22.341481 unknown[1119]: fetched base config from "system" Oct 2 20:05:22.341493 unknown[1119]: fetched user config from "aws" Oct 2 20:05:22.342677 ignition[1119]: fetch: fetch complete Oct 2 20:05:22.342685 ignition[1119]: fetch: fetch passed Oct 2 20:05:22.342776 ignition[1119]: Ignition finished successfully Oct 2 20:05:22.346122 systemd[1]: Finished ignition-fetch.service. Oct 2 20:05:22.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.348526 systemd[1]: Starting ignition-kargs.service... Oct 2 20:05:22.356257 kernel: audit: type=1130 audit(1696277122.346:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.366765 ignition[1125]: Ignition 2.14.0 Oct 2 20:05:22.366777 ignition[1125]: Stage: kargs Oct 2 20:05:22.367278 ignition[1125]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:22.367436 ignition[1125]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:22.377444 ignition[1125]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:22.379025 ignition[1125]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:22.380841 ignition[1125]: INFO : PUT result: OK Oct 2 20:05:22.384569 ignition[1125]: kargs: kargs passed Oct 2 20:05:22.384632 ignition[1125]: Ignition finished successfully Oct 2 20:05:22.387815 systemd[1]: Finished ignition-kargs.service. Oct 2 20:05:22.398182 kernel: audit: type=1130 audit(1696277122.387:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.390274 systemd[1]: Starting ignition-disks.service... Oct 2 20:05:22.403315 ignition[1131]: Ignition 2.14.0 Oct 2 20:05:22.403328 ignition[1131]: Stage: disks Oct 2 20:05:22.403636 ignition[1131]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:22.403670 ignition[1131]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:22.415571 ignition[1131]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:22.417114 ignition[1131]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:22.419210 ignition[1131]: INFO : PUT result: OK Oct 2 20:05:22.423214 ignition[1131]: disks: disks passed Oct 2 20:05:22.423287 ignition[1131]: Ignition finished successfully Oct 2 20:05:22.427277 systemd[1]: Finished ignition-disks.service. Oct 2 20:05:22.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.427561 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:05:22.435248 kernel: audit: type=1130 audit(1696277122.426:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.436818 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:22.441698 systemd[1]: Reached target local-fs.target. Oct 2 20:05:22.444799 systemd[1]: Reached target sysinit.target. Oct 2 20:05:22.447492 systemd[1]: Reached target basic.target. Oct 2 20:05:22.449831 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:05:22.484092 systemd-fsck[1139]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 20:05:22.488286 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:05:22.496728 kernel: audit: type=1130 audit(1696277122.488:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.488000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.497309 systemd[1]: Mounting sysroot.mount... Oct 2 20:05:22.524383 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:05:22.526750 systemd[1]: Mounted sysroot.mount. Oct 2 20:05:22.530983 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:05:22.544268 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:05:22.550252 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:05:22.550473 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:05:22.555425 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:05:22.567346 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:05:22.575106 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:22.580973 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:05:22.597394 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1156) Oct 2 20:05:22.599520 initrd-setup-root[1161]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:05:22.606473 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:22.606553 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:22.606577 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:22.608903 initrd-setup-root[1185]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:05:22.616380 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:22.617395 initrd-setup-root[1195]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:05:22.622741 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:22.627733 initrd-setup-root[1203]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:05:22.723793 systemd-networkd[1095]: eth0: Gained IPv6LL Oct 2 20:05:22.850136 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:05:22.874382 kernel: audit: type=1130 audit(1696277122.852:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.855333 systemd[1]: Starting ignition-mount.service... Oct 2 20:05:22.869344 systemd[1]: Starting sysroot-boot.service... Oct 2 20:05:22.887387 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:22.887534 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:22.910722 ignition[1222]: INFO : Ignition 2.14.0 Oct 2 20:05:22.910722 ignition[1222]: INFO : Stage: mount Oct 2 20:05:22.912845 ignition[1222]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:22.912845 ignition[1222]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:22.923599 ignition[1222]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:22.926496 ignition[1222]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:22.926496 ignition[1222]: INFO : PUT result: OK Oct 2 20:05:22.934286 kernel: audit: type=1130 audit(1696277122.926:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.927017 systemd[1]: Finished sysroot-boot.service. Oct 2 20:05:22.936551 systemd[1]: Finished ignition-mount.service. Oct 2 20:05:22.944831 ignition[1222]: INFO : mount: mount passed Oct 2 20:05:22.944831 ignition[1222]: INFO : Ignition finished successfully Oct 2 20:05:22.954503 kernel: audit: type=1130 audit(1696277122.942:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.945366 systemd[1]: Starting ignition-files.service... Oct 2 20:05:22.960193 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:22.980375 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1232) Oct 2 20:05:22.980434 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:22.983167 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:22.983215 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:22.990375 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:22.993439 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:23.009153 ignition[1251]: INFO : Ignition 2.14.0 Oct 2 20:05:23.009153 ignition[1251]: INFO : Stage: files Oct 2 20:05:23.011529 ignition[1251]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.011529 ignition[1251]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.023720 ignition[1251]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.026143 ignition[1251]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.029597 ignition[1251]: INFO : PUT result: OK Oct 2 20:05:23.033840 ignition[1251]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:05:23.039900 ignition[1251]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:05:23.044841 ignition[1251]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:05:23.094372 ignition[1251]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:05:23.098489 ignition[1251]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:05:23.102237 unknown[1251]: wrote ssh authorized keys file for user: core Oct 2 20:05:23.106564 ignition[1251]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:05:23.109420 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:05:23.112357 ignition[1251]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 20:05:23.399998 ignition[1251]: INFO : GET result: OK Oct 2 20:05:23.770942 ignition[1251]: DEBUG : file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 20:05:23.774081 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:05:23.774081 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 20:05:23.774081 ignition[1251]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.24.2/crictl-v1.24.2-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:23.860148 ignition[1251]: INFO : GET result: OK Oct 2 20:05:23.959904 ignition[1251]: DEBUG : file matches expected sum of: 961188117863ca9af5b084e84691e372efee93ad09daf6a0422e8d75a5803f394d8968064f7ca89f14e8973766201e731241f32538cf2c8d91f0233e786302df Oct 2 20:05:23.963521 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.24.2-linux-amd64.tar.gz" Oct 2 20:05:23.963521 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:23.963521 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:23.963521 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:23.963521 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:23.979550 ignition[1251]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem269733206" Oct 2 20:05:23.984063 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1251) Oct 2 20:05:23.984097 ignition[1251]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem269733206": device or resource busy Oct 2 20:05:23.984097 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem269733206", trying btrfs: device or resource busy Oct 2 20:05:23.984097 ignition[1251]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem269733206" Oct 2 20:05:23.984097 ignition[1251]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem269733206" Oct 2 20:05:24.000391 ignition[1251]: INFO : op(3): [started] unmounting "/mnt/oem269733206" Oct 2 20:05:24.002140 ignition[1251]: INFO : op(3): [finished] unmounting "/mnt/oem269733206" Oct 2 20:05:24.004097 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:24.004181 systemd[1]: mnt-oem269733206.mount: Deactivated successfully. Oct 2 20:05:24.015875 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:24.018804 ignition[1251]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:05:24.107296 ignition[1251]: INFO : GET result: OK Oct 2 20:05:24.742021 ignition[1251]: DEBUG : file matches expected sum of: 43b8f213f1732c092e34008d5334e6622a6603f7ec5890c395ac911d50069d0dc11a81fa38436df40fc875a10fee6ee13aa285c017f1de210171065e847c99c5 Oct 2 20:05:24.747631 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:24.753180 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:24.753180 ignition[1251]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:05:24.811234 ignition[1251]: INFO : GET result: OK Oct 2 20:05:26.296677 ignition[1251]: DEBUG : file matches expected sum of: 82b36a0b83a1d48ef1f70e3ed2a263b3ce935304cdc0606d194b290217fb04f98628b0d82e200b51ccf5c05c718b2476274ae710bb143fffe28dc6bbf8407d54 Oct 2 20:05:26.300914 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:26.300914 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:26.300914 ignition[1251]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:05:26.345598 ignition[1251]: INFO : GET result: OK Oct 2 20:05:26.945212 ignition[1251]: DEBUG : file matches expected sum of: 9006cd791c99f5421c09ae8f6029fdd0ea4608909f590dea41ba4dd5c500440272e9ece21489d1f192966717987251ded5394ea1dd4c5d091b700ac1c8cfa392 Oct 2 20:05:26.948793 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:26.948793 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:26.948793 ignition[1251]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.2/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:27.243646 ignition[1251]: INFO : GET result: OK Oct 2 20:05:27.667535 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:27.670748 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:27.670748 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:27.670748 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:27.679252 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:27.679252 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:27.679252 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:27.688269 ignition[1251]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1652799514" Oct 2 20:05:27.688269 ignition[1251]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1652799514": device or resource busy Oct 2 20:05:27.688269 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1652799514", trying btrfs: device or resource busy Oct 2 20:05:27.688269 ignition[1251]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1652799514" Oct 2 20:05:27.698614 ignition[1251]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1652799514" Oct 2 20:05:27.698614 ignition[1251]: INFO : op(6): [started] unmounting "/mnt/oem1652799514" Oct 2 20:05:27.698614 ignition[1251]: INFO : op(6): [finished] unmounting "/mnt/oem1652799514" Oct 2 20:05:27.698614 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:27.698614 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:27.711733 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:27.699493 systemd[1]: mnt-oem1652799514.mount: Deactivated successfully. Oct 2 20:05:27.728663 ignition[1251]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1727398961" Oct 2 20:05:27.730646 ignition[1251]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1727398961": device or resource busy Oct 2 20:05:27.730646 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1727398961", trying btrfs: device or resource busy Oct 2 20:05:27.730646 ignition[1251]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1727398961" Oct 2 20:05:27.730646 ignition[1251]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1727398961" Oct 2 20:05:27.739032 ignition[1251]: INFO : op(9): [started] unmounting "/mnt/oem1727398961" Oct 2 20:05:27.739032 ignition[1251]: INFO : op(9): [finished] unmounting "/mnt/oem1727398961" Oct 2 20:05:27.739032 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:27.739032 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:27.739032 ignition[1251]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:27.743043 systemd[1]: mnt-oem1727398961.mount: Deactivated successfully. Oct 2 20:05:27.757284 ignition[1251]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2142629573" Oct 2 20:05:27.759398 ignition[1251]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2142629573": device or resource busy Oct 2 20:05:27.759398 ignition[1251]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2142629573", trying btrfs: device or resource busy Oct 2 20:05:27.759398 ignition[1251]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2142629573" Oct 2 20:05:27.759398 ignition[1251]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2142629573" Oct 2 20:05:27.776960 ignition[1251]: INFO : op(c): [started] unmounting "/mnt/oem2142629573" Oct 2 20:05:27.776960 ignition[1251]: INFO : op(c): [finished] unmounting "/mnt/oem2142629573" Oct 2 20:05:27.776960 ignition[1251]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:27.776960 ignition[1251]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:27.776960 ignition[1251]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:27.776960 ignition[1251]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 20:05:27.776960 ignition[1251]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:27.797634 ignition[1251]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:27.870956 kernel: audit: type=1130 audit(1696277127.810:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.871098 ignition[1251]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:27.871098 ignition[1251]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:27.871098 ignition[1251]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:27.871098 ignition[1251]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:27.871098 ignition[1251]: INFO : files: files passed Oct 2 20:05:27.871098 ignition[1251]: INFO : Ignition finished successfully Oct 2 20:05:27.805727 systemd[1]: Finished ignition-files.service. Oct 2 20:05:27.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.820722 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:05:27.930537 kernel: audit: type=1130 audit(1696277127.895:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.930596 kernel: audit: type=1131 audit(1696277127.895:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.930615 kernel: audit: type=1130 audit(1696277127.916:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.930745 initrd-setup-root-after-ignition[1275]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:05:27.847591 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:05:27.868665 systemd[1]: Starting ignition-quench.service... Oct 2 20:05:27.887397 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:05:27.887519 systemd[1]: Finished ignition-quench.service. Oct 2 20:05:27.897225 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:05:27.918803 systemd[1]: Reached target ignition-complete.target. Oct 2 20:05:27.935663 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:05:27.991910 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:05:27.992162 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:05:27.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:27.994107 systemd[1]: Reached target initrd-fs.target. Oct 2 20:05:28.008886 kernel: audit: type=1130 audit(1696277127.992:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.008919 kernel: audit: type=1131 audit(1696277127.992:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.005891 systemd[1]: Reached target initrd.target. Oct 2 20:05:28.008995 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:05:28.009941 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:05:28.026868 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:05:28.028286 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:05:28.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.042389 kernel: audit: type=1130 audit(1696277128.025:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.052730 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:05:28.052967 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:05:28.057725 systemd[1]: Stopped target timers.target. Oct 2 20:05:28.059874 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:05:28.059999 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:05:28.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.070095 systemd[1]: Stopped target initrd.target. Oct 2 20:05:28.095904 kernel: audit: type=1131 audit(1696277128.068:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.095140 systemd[1]: Stopped target basic.target. Oct 2 20:05:28.097945 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:05:28.101265 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:05:28.104192 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:05:28.107247 systemd[1]: Stopped target remote-fs.target. Oct 2 20:05:28.109401 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:05:28.111632 systemd[1]: Stopped target sysinit.target. Oct 2 20:05:28.112997 systemd[1]: Stopped target local-fs.target. Oct 2 20:05:28.114192 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:05:28.115518 systemd[1]: Stopped target swap.target. Oct 2 20:05:28.116994 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:05:28.117118 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:05:28.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.125918 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:05:28.134067 kernel: audit: type=1131 audit(1696277128.124:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.134170 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:05:28.135495 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:05:28.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.138391 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:05:28.143500 kernel: audit: type=1131 audit(1696277128.136:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.138571 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:05:28.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.147677 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:05:28.148892 systemd[1]: Stopped ignition-files.service. Oct 2 20:05:28.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.152914 systemd[1]: Stopping ignition-mount.service... Oct 2 20:05:28.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.162184 systemd[1]: Stopping iscsiuio.service... Oct 2 20:05:28.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.168230 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:05:28.169362 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:05:28.169650 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:05:28.175508 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:05:28.175658 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:05:28.186663 ignition[1289]: INFO : Ignition 2.14.0 Oct 2 20:05:28.188126 ignition[1289]: INFO : Stage: umount Oct 2 20:05:28.188126 ignition[1289]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:28.188126 ignition[1289]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:28.197150 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:05:28.200055 systemd[1]: Stopped iscsiuio.service. Oct 2 20:05:28.201000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.204901 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:05:28.206603 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:05:28.208908 ignition[1289]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:28.208908 ignition[1289]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:28.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.213121 ignition[1289]: INFO : PUT result: OK Oct 2 20:05:28.219666 ignition[1289]: INFO : umount: umount passed Oct 2 20:05:28.221003 ignition[1289]: INFO : Ignition finished successfully Oct 2 20:05:28.222840 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:05:28.222997 systemd[1]: Stopped ignition-mount.service. Oct 2 20:05:28.225000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.226979 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:05:28.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.227096 systemd[1]: Stopped ignition-disks.service. Oct 2 20:05:28.228284 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:05:28.228344 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:05:28.229497 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:05:28.229597 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:05:28.230839 systemd[1]: Stopped target network.target. Oct 2 20:05:28.231975 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:05:28.232070 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:05:28.233400 systemd[1]: Stopped target paths.target. Oct 2 20:05:28.246311 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:05:28.248030 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:05:28.250248 systemd[1]: Stopped target slices.target. Oct 2 20:05:28.252139 systemd[1]: Stopped target sockets.target. Oct 2 20:05:28.254152 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:05:28.254194 systemd[1]: Closed iscsid.socket. Oct 2 20:05:28.256905 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:05:28.256954 systemd[1]: Closed iscsiuio.socket. Oct 2 20:05:28.259862 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:05:28.259924 systemd[1]: Stopped ignition-setup.service. Oct 2 20:05:28.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.263461 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:05:28.267624 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:05:28.268417 systemd-networkd[1095]: eth0: DHCPv6 lease lost Oct 2 20:05:28.275155 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:05:28.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.275473 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:05:28.281000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.282000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:05:28.282000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:05:28.280262 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:05:28.280391 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:05:28.283009 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:05:28.283082 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:05:28.286652 systemd[1]: Stopping network-cleanup.service... Oct 2 20:05:28.287861 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:05:28.287979 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:05:28.297035 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:05:28.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.297121 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:05:28.299998 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:05:28.300077 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:05:28.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.305015 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:05:28.309560 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:05:28.310925 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:05:28.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.314026 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:05:28.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.314120 systemd[1]: Stopped network-cleanup.service. Oct 2 20:05:28.315792 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:05:28.315834 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:05:28.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.323000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.318455 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:05:28.318516 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:05:28.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.320585 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:05:28.320654 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:05:28.323467 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:05:28.323530 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:05:28.325376 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:05:28.325488 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:05:28.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.329876 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:05:28.329984 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 20:05:28.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.330049 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 20:05:28.344534 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:05:28.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.344589 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:05:28.348605 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:05:28.348680 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:05:28.356767 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:05:28.359065 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:05:28.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.364555 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:05:28.364904 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:05:28.368324 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:05:28.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:28.370765 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:05:28.370826 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:05:28.373962 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:05:28.396532 systemd[1]: Switching root. Oct 2 20:05:28.425655 iscsid[1100]: iscsid shutting down. Oct 2 20:05:28.426912 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). Oct 2 20:05:28.426994 systemd-journald[185]: Journal stopped Oct 2 20:05:34.796121 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:05:34.796214 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:05:34.796234 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:05:34.796261 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:05:34.796281 kernel: SELinux: policy capability open_perms=1 Oct 2 20:05:34.796299 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:05:34.796317 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:05:34.796338 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:05:34.799034 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:05:34.799069 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:05:34.799086 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:05:34.799106 systemd[1]: Successfully loaded SELinux policy in 114.809ms. Oct 2 20:05:34.799141 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 32.551ms. Oct 2 20:05:34.799162 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:34.799182 systemd[1]: Detected virtualization amazon. Oct 2 20:05:34.799205 systemd[1]: Detected architecture x86-64. Oct 2 20:05:34.799224 systemd[1]: Detected first boot. Oct 2 20:05:34.799242 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:34.799261 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:05:34.799280 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:34.799300 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:34.799321 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:34.799451 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 20:05:34.799472 kernel: audit: type=1334 audit(1696277134.444:86): prog-id=12 op=LOAD Oct 2 20:05:34.799491 kernel: audit: type=1334 audit(1696277134.444:87): prog-id=3 op=UNLOAD Oct 2 20:05:34.799509 kernel: audit: type=1334 audit(1696277134.446:88): prog-id=13 op=LOAD Oct 2 20:05:34.799525 kernel: audit: type=1334 audit(1696277134.447:89): prog-id=14 op=LOAD Oct 2 20:05:34.799543 kernel: audit: type=1334 audit(1696277134.447:90): prog-id=4 op=UNLOAD Oct 2 20:05:34.799560 kernel: audit: type=1334 audit(1696277134.447:91): prog-id=5 op=UNLOAD Oct 2 20:05:34.799577 kernel: audit: type=1334 audit(1696277134.453:92): prog-id=15 op=LOAD Oct 2 20:05:34.799594 kernel: audit: type=1334 audit(1696277134.453:93): prog-id=12 op=UNLOAD Oct 2 20:05:34.799614 kernel: audit: type=1334 audit(1696277134.458:94): prog-id=16 op=LOAD Oct 2 20:05:34.799631 kernel: audit: type=1334 audit(1696277134.459:95): prog-id=17 op=LOAD Oct 2 20:05:34.799649 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:05:34.799667 systemd[1]: Stopped iscsid.service. Oct 2 20:05:34.799685 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:05:34.799703 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:05:34.799722 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:05:34.799742 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:05:34.799763 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:05:34.799782 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 20:05:34.799800 systemd[1]: Created slice system-getty.slice. Oct 2 20:05:34.799818 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:05:34.799837 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:05:34.799855 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:05:34.799874 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:05:34.799891 systemd[1]: Created slice user.slice. Oct 2 20:05:34.799912 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:34.799931 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:05:34.799949 systemd[1]: Set up automount boot.automount. Oct 2 20:05:34.799968 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:05:34.799987 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:05:34.800005 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:05:34.800025 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:05:34.800044 systemd[1]: Reached target integritysetup.target. Oct 2 20:05:34.800062 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:34.800083 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:34.800102 systemd[1]: Reached target slices.target. Oct 2 20:05:34.800122 systemd[1]: Reached target swap.target. Oct 2 20:05:34.800150 systemd[1]: Reached target torcx.target. Oct 2 20:05:34.800170 systemd[1]: Reached target veritysetup.target. Oct 2 20:05:34.800191 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:05:34.800210 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:05:34.800710 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:34.800735 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:34.800754 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:34.800773 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:05:34.800792 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:05:34.800811 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:05:34.800829 systemd[1]: Mounting media.mount... Oct 2 20:05:34.800849 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:34.800873 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:05:34.800892 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:05:34.800911 systemd[1]: Mounting tmp.mount... Oct 2 20:05:34.800932 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:05:34.800952 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:05:34.800970 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:34.800991 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:05:34.801009 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:05:34.801031 systemd[1]: Starting modprobe@drm.service... Oct 2 20:05:34.801050 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:05:34.801069 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:05:34.801087 systemd[1]: Starting modprobe@loop.service... Oct 2 20:05:34.801107 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:05:34.801126 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:05:34.801145 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:05:34.801163 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:05:34.801182 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:05:34.801203 systemd[1]: Stopped systemd-journald.service. Oct 2 20:05:34.801222 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:34.801241 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:34.801259 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:05:34.801278 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:05:34.801298 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:34.801316 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:05:34.801337 systemd[1]: Stopped verity-setup.service. Oct 2 20:05:34.801367 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:34.801390 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:05:34.801409 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:05:34.801427 systemd[1]: Mounted media.mount. Oct 2 20:05:34.801445 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:05:34.801464 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:05:34.801483 systemd[1]: Mounted tmp.mount. Oct 2 20:05:34.801501 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:34.801520 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:05:34.801538 kernel: loop: module loaded Oct 2 20:05:34.801556 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:05:34.801578 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:05:34.801598 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:05:34.801617 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:05:34.801636 systemd[1]: Finished modprobe@drm.service. Oct 2 20:05:34.801658 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:05:34.801676 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:05:34.801695 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:05:34.801714 systemd[1]: Finished modprobe@loop.service. Oct 2 20:05:34.801732 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:34.801758 systemd-journald[1396]: Journal started Oct 2 20:05:34.801828 systemd-journald[1396]: Runtime Journal (/run/log/journal/ec24bde77e4f7da09d91d3e820cb2ddb) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:29.157000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:05:29.571000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:29.571000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:29.571000 audit: BPF prog-id=10 op=LOAD Oct 2 20:05:34.805975 systemd[1]: Started systemd-journald.service. Oct 2 20:05:34.806027 kernel: fuse: init (API version 7.34) Oct 2 20:05:29.572000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:05:29.572000 audit: BPF prog-id=11 op=LOAD Oct 2 20:05:29.572000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:05:34.444000 audit: BPF prog-id=12 op=LOAD Oct 2 20:05:34.444000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:05:34.446000 audit: BPF prog-id=13 op=LOAD Oct 2 20:05:34.447000 audit: BPF prog-id=14 op=LOAD Oct 2 20:05:34.447000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:05:34.447000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:05:34.453000 audit: BPF prog-id=15 op=LOAD Oct 2 20:05:34.453000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:05:34.458000 audit: BPF prog-id=16 op=LOAD Oct 2 20:05:34.459000 audit: BPF prog-id=17 op=LOAD Oct 2 20:05:34.459000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:05:34.459000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:05:34.463000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.467000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:05:34.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.708000 audit: BPF prog-id=18 op=LOAD Oct 2 20:05:34.708000 audit: BPF prog-id=19 op=LOAD Oct 2 20:05:34.708000 audit: BPF prog-id=20 op=LOAD Oct 2 20:05:34.709000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:05:34.709000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:05:34.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.793000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:05:34.793000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffd87549760 a2=4000 a3=7ffd875497fc items=0 ppid=1 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:34.793000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:05:34.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.802000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:29.777726 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:34.443698 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:05:34.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:29.778266 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:34.463223 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:05:29.778284 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:34.809419 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:05:29.778317 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:05:34.811234 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:05:29.778328 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:05:34.812911 systemd[1]: Reached target network-pre.target. Oct 2 20:05:29.778378 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:05:29.778391 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:05:34.817283 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:05:29.778613 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:05:29.778656 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:29.778669 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:29.779322 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:05:29.779376 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:05:29.779395 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:05:29.779411 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:05:29.779429 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:05:29.779443 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:05:33.697214 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:33Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:33.697597 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:33Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:33.697762 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:33Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:33.698054 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:33Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:33.698111 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:33Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:05:33.698203 /usr/lib/systemd/system-generators/torcx-generator[1322]: time="2023-10-02T20:05:33Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:05:34.827671 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:05:34.830020 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:05:34.833293 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:05:34.834805 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:05:34.837293 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:05:34.849000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.839097 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:05:34.840805 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:34.847781 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:05:34.848119 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:05:34.850781 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:05:34.857920 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:05:34.863922 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:05:34.891746 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:34.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.917664 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:05:34.919332 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:05:34.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.951779 systemd-journald[1396]: Time spent on flushing to /var/log/journal/ec24bde77e4f7da09d91d3e820cb2ddb is 50.958ms for 1214 entries. Oct 2 20:05:34.951779 systemd-journald[1396]: System Journal (/var/log/journal/ec24bde77e4f7da09d91d3e820cb2ddb) is 8.0M, max 195.6M, 187.6M free. Oct 2 20:05:35.052712 systemd-journald[1396]: Received client request to flush runtime journal. Oct 2 20:05:34.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:34.956100 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:34.960903 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:05:35.053662 udevadm[1428]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 20:05:35.022557 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:05:35.025432 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:05:35.055160 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:05:35.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.179036 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:05:35.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.182402 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:05:35.269008 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:05:35.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.966391 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:05:35.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:35.967000 audit: BPF prog-id=21 op=LOAD Oct 2 20:05:35.967000 audit: BPF prog-id=22 op=LOAD Oct 2 20:05:35.967000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:05:35.967000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:05:35.969855 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:35.990968 systemd-udevd[1442]: Using default interface naming scheme 'v252'. Oct 2 20:05:36.069757 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:36.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.071000 audit: BPF prog-id=23 op=LOAD Oct 2 20:05:36.073417 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:36.102000 audit: BPF prog-id=24 op=LOAD Oct 2 20:05:36.103000 audit: BPF prog-id=25 op=LOAD Oct 2 20:05:36.103000 audit: BPF prog-id=26 op=LOAD Oct 2 20:05:36.105735 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:05:36.194300 (udev-worker)[1444]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:36.200087 systemd[1]: Started systemd-userdbd.service. Oct 2 20:05:36.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.203546 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:05:36.305374 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 20:05:36.314398 kernel: ACPI: button: Power Button [PWRF] Oct 2 20:05:36.350151 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Oct 2 20:05:36.354000 audit[1455]: AVC avc: denied { confidentiality } for pid=1455 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:05:36.354000 audit[1455]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55965c231830 a1=32194 a2=7f0847547bc5 a3=5 items=106 ppid=1442 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:36.354000 audit: CWD cwd="/" Oct 2 20:05:36.354000 audit: PATH item=0 name=(null) inode=14970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=1 name=(null) inode=14971 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=2 name=(null) inode=14970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=3 name=(null) inode=14972 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=4 name=(null) inode=14970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=5 name=(null) inode=14973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=6 name=(null) inode=14973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=7 name=(null) inode=14974 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=8 name=(null) inode=14973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=9 name=(null) inode=14975 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=10 name=(null) inode=14973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=11 name=(null) inode=14976 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=12 name=(null) inode=14973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=13 name=(null) inode=14977 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=14 name=(null) inode=14973 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=15 name=(null) inode=14978 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=16 name=(null) inode=14970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=17 name=(null) inode=14979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=18 name=(null) inode=14979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=19 name=(null) inode=14980 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=20 name=(null) inode=14979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=21 name=(null) inode=14981 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=22 name=(null) inode=14979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=23 name=(null) inode=14982 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=24 name=(null) inode=14979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=25 name=(null) inode=14983 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=26 name=(null) inode=14979 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=27 name=(null) inode=14984 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=28 name=(null) inode=14970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=29 name=(null) inode=14985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=30 name=(null) inode=14985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=31 name=(null) inode=14986 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=32 name=(null) inode=14985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=33 name=(null) inode=14987 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=34 name=(null) inode=14985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=35 name=(null) inode=14988 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=36 name=(null) inode=14985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=37 name=(null) inode=14989 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=38 name=(null) inode=14985 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=39 name=(null) inode=14990 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=40 name=(null) inode=14970 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=41 name=(null) inode=14991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=42 name=(null) inode=14991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=43 name=(null) inode=14992 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=44 name=(null) inode=14991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=45 name=(null) inode=14993 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=46 name=(null) inode=14991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=47 name=(null) inode=14994 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=48 name=(null) inode=14991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=49 name=(null) inode=14995 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=50 name=(null) inode=14991 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=51 name=(null) inode=14996 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=52 name=(null) inode=1042 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.376398 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 20:05:36.354000 audit: PATH item=53 name=(null) inode=14997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=54 name=(null) inode=14997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=55 name=(null) inode=14998 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=56 name=(null) inode=14997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=57 name=(null) inode=14999 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=58 name=(null) inode=14997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=59 name=(null) inode=15000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=60 name=(null) inode=15000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=61 name=(null) inode=15001 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=62 name=(null) inode=15000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=63 name=(null) inode=15002 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=64 name=(null) inode=15000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=65 name=(null) inode=15003 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=66 name=(null) inode=15000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=67 name=(null) inode=15004 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=68 name=(null) inode=15000 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=69 name=(null) inode=15005 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=70 name=(null) inode=14997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=71 name=(null) inode=15006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=72 name=(null) inode=15006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=73 name=(null) inode=15007 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=74 name=(null) inode=15006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=75 name=(null) inode=15008 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=76 name=(null) inode=15006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=77 name=(null) inode=15009 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=78 name=(null) inode=15006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=79 name=(null) inode=15010 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=80 name=(null) inode=15006 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=81 name=(null) inode=15011 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=82 name=(null) inode=14997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=83 name=(null) inode=15012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=84 name=(null) inode=15012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=85 name=(null) inode=15013 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=86 name=(null) inode=15012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=87 name=(null) inode=15014 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=88 name=(null) inode=15012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=89 name=(null) inode=15015 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=90 name=(null) inode=15012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=91 name=(null) inode=15016 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=92 name=(null) inode=15012 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=93 name=(null) inode=15017 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=94 name=(null) inode=14997 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=95 name=(null) inode=15018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=96 name=(null) inode=15018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=97 name=(null) inode=15019 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=98 name=(null) inode=15018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=99 name=(null) inode=15020 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=100 name=(null) inode=15018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=101 name=(null) inode=15021 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=102 name=(null) inode=15018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=103 name=(null) inode=15022 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=104 name=(null) inode=15018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PATH item=105 name=(null) inode=15023 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:36.354000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:05:36.405325 systemd-networkd[1452]: lo: Link UP Oct 2 20:05:36.405336 systemd-networkd[1452]: lo: Gained carrier Oct 2 20:05:36.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.405968 systemd-networkd[1452]: Enumeration completed Oct 2 20:05:36.406090 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:36.414310 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:05:36.406310 systemd-networkd[1452]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:36.411325 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:05:36.413323 systemd-networkd[1452]: eth0: Link UP Oct 2 20:05:36.413515 systemd-networkd[1452]: eth0: Gained carrier Oct 2 20:05:36.424099 systemd-networkd[1452]: eth0: DHCPv4 address 172.31.30.99/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:36.431386 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 20:05:36.474374 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 20:05:36.488476 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:05:36.507501 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1456) Oct 2 20:05:36.651752 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:36.745833 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:05:36.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.748365 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:05:36.803022 lvm[1556]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:36.833869 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:05:36.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.835259 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:36.838498 systemd[1]: Starting lvm2-activation.service... Oct 2 20:05:36.850853 lvm[1557]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:36.885044 systemd[1]: Finished lvm2-activation.service. Oct 2 20:05:36.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.886259 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:36.887391 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:05:36.887428 systemd[1]: Reached target local-fs.target. Oct 2 20:05:36.888652 systemd[1]: Reached target machines.target. Oct 2 20:05:36.891106 systemd[1]: Starting ldconfig.service... Oct 2 20:05:36.892704 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:05:36.892770 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:36.894012 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:05:36.896531 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:05:36.900191 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:05:36.901835 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:36.901917 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:36.904192 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:05:36.931437 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1559 (bootctl) Oct 2 20:05:36.933128 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:05:36.953395 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:05:36.953479 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:05:36.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:36.963828 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:05:36.979731 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:05:37.127964 systemd-fsck[1569]: fsck.fat 4.2 (2021-01-31) Oct 2 20:05:37.127964 systemd-fsck[1569]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 20:05:37.135168 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:05:37.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.139314 systemd[1]: Mounting boot.mount... Oct 2 20:05:37.155555 systemd[1]: Mounted boot.mount. Oct 2 20:05:37.193185 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:05:37.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.312718 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:05:37.316271 systemd[1]: Starting audit-rules.service... Oct 2 20:05:37.318690 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:05:37.325191 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:05:37.327000 audit: BPF prog-id=27 op=LOAD Oct 2 20:05:37.332000 audit: BPF prog-id=28 op=LOAD Oct 2 20:05:37.330964 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:37.335134 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:05:37.338714 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:05:37.349000 audit[1589]: SYSTEM_BOOT pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.363666 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:05:37.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.383151 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:05:37.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.385638 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:05:37.457023 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:05:37.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.488000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:05:37.488000 audit[1603]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc9d98cc00 a2=420 a3=0 items=0 ppid=1583 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:37.488000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:05:37.492784 augenrules[1603]: No rules Oct 2 20:05:37.491087 systemd[1]: Finished audit-rules.service. Oct 2 20:05:37.511645 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:05:37.512929 systemd[1]: Reached target time-set.target. Oct 2 20:05:37.571483 systemd-networkd[1452]: eth0: Gained IPv6LL Oct 2 20:05:37.573225 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:05:37.660079 systemd-resolved[1587]: Positive Trust Anchors: Oct 2 20:05:37.660101 systemd-resolved[1587]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:37.660145 systemd-resolved[1587]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:38.355949 systemd-timesyncd[1588]: Contacted time server 162.159.200.1:123 (0.flatcar.pool.ntp.org). Oct 2 20:05:38.356035 systemd-timesyncd[1588]: Initial clock synchronization to Mon 2023-10-02 20:05:38.355795 UTC. Oct 2 20:05:38.678581 systemd-resolved[1587]: Defaulting to hostname 'linux'. Oct 2 20:05:38.680779 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:38.682175 systemd[1]: Reached target network.target. Oct 2 20:05:38.683466 systemd[1]: Reached target network-online.target. Oct 2 20:05:38.684624 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:38.754901 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:05:38.755840 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:05:39.409192 ldconfig[1558]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:05:39.414037 systemd[1]: Finished ldconfig.service. Oct 2 20:05:39.423880 systemd[1]: Starting systemd-update-done.service... Oct 2 20:05:39.433397 systemd[1]: Finished systemd-update-done.service. Oct 2 20:05:39.434836 systemd[1]: Reached target sysinit.target. Oct 2 20:05:39.435929 systemd[1]: Started motdgen.path. Oct 2 20:05:39.436873 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:05:39.438591 systemd[1]: Started logrotate.timer. Oct 2 20:05:39.439690 systemd[1]: Started mdadm.timer. Oct 2 20:05:39.440570 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:05:39.441656 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:05:39.441691 systemd[1]: Reached target paths.target. Oct 2 20:05:39.442664 systemd[1]: Reached target timers.target. Oct 2 20:05:39.444120 systemd[1]: Listening on dbus.socket. Oct 2 20:05:39.446888 systemd[1]: Starting docker.socket... Oct 2 20:05:39.454952 systemd[1]: Listening on sshd.socket. Oct 2 20:05:39.456009 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:39.456631 systemd[1]: Listening on docker.socket. Oct 2 20:05:39.457692 systemd[1]: Reached target sockets.target. Oct 2 20:05:39.459824 systemd[1]: Reached target basic.target. Oct 2 20:05:39.461560 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.461599 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.463243 systemd[1]: Started amazon-ssm-agent.service. Oct 2 20:05:39.466762 systemd[1]: Starting containerd.service... Oct 2 20:05:39.477592 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 20:05:39.486622 systemd[1]: Starting dbus.service... Oct 2 20:05:39.493962 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:05:39.514921 systemd[1]: Starting extend-filesystems.service... Oct 2 20:05:39.517460 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:05:39.629373 jq[1623]: false Oct 2 20:05:39.519340 systemd[1]: Starting motdgen.service... Oct 2 20:05:39.522513 systemd[1]: Started nvidia.service. Oct 2 20:05:39.526024 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:05:39.530236 systemd[1]: Starting prepare-critools.service... Oct 2 20:05:39.533229 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:05:39.542137 systemd[1]: Starting sshd-keygen.service... Oct 2 20:05:39.559875 systemd[1]: Starting systemd-logind.service... Oct 2 20:05:39.562395 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:39.562466 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:05:39.563404 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:05:39.704448 jq[1633]: true Oct 2 20:05:39.564919 systemd[1]: Starting update-engine.service... Oct 2 20:05:39.723642 tar[1636]: crictl Oct 2 20:05:39.569194 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:05:39.601317 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:05:39.731641 jq[1640]: true Oct 2 20:05:39.601628 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:05:39.733878 tar[1635]: ./ Oct 2 20:05:39.733878 tar[1635]: ./macvlan Oct 2 20:05:39.687702 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:05:39.688047 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:05:39.808294 extend-filesystems[1624]: Found nvme0n1 Oct 2 20:05:39.809737 extend-filesystems[1624]: Found nvme0n1p1 Oct 2 20:05:39.809737 extend-filesystems[1624]: Found nvme0n1p2 Oct 2 20:05:39.809737 extend-filesystems[1624]: Found nvme0n1p3 Oct 2 20:05:39.809737 extend-filesystems[1624]: Found usr Oct 2 20:05:39.809737 extend-filesystems[1624]: Found nvme0n1p4 Oct 2 20:05:39.809737 extend-filesystems[1624]: Found nvme0n1p6 Oct 2 20:05:39.809737 extend-filesystems[1624]: Found nvme0n1p7 Oct 2 20:05:39.809737 extend-filesystems[1624]: Found nvme0n1p9 Oct 2 20:05:39.809737 extend-filesystems[1624]: Checking size of /dev/nvme0n1p9 Oct 2 20:05:39.855739 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:05:39.855960 systemd[1]: Finished motdgen.service. Oct 2 20:05:39.878124 dbus-daemon[1622]: [system] SELinux support is enabled Oct 2 20:05:39.878684 systemd[1]: Started dbus.service. Oct 2 20:05:39.886586 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:05:39.886630 systemd[1]: Reached target system-config.target. Oct 2 20:05:39.887906 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:05:39.887926 systemd[1]: Reached target user-config.target. Oct 2 20:05:39.901971 amazon-ssm-agent[1619]: 2023/10/02 20:05:39 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 20:05:39.912241 amazon-ssm-agent[1619]: Initializing new seelog logger Oct 2 20:05:39.913460 amazon-ssm-agent[1619]: New Seelog Logger Creation Complete Oct 2 20:05:39.917466 extend-filesystems[1624]: Resized partition /dev/nvme0n1p9 Oct 2 20:05:39.920496 amazon-ssm-agent[1619]: 2023/10/02 20:05:39 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:39.920710 amazon-ssm-agent[1619]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:39.921443 amazon-ssm-agent[1619]: 2023/10/02 20:05:39 processing appconfig overrides Oct 2 20:05:39.947115 bash[1685]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:39.945392 dbus-daemon[1622]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1452 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:39.948121 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:05:39.953461 systemd[1]: Starting systemd-hostnamed.service... Oct 2 20:05:39.963329 extend-filesystems[1687]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 20:05:39.978196 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 20:05:40.043247 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 20:05:40.054528 update_engine[1632]: I1002 20:05:40.053507 1632 main.cc:92] Flatcar Update Engine starting Oct 2 20:05:40.065604 update_engine[1632]: I1002 20:05:40.061403 1632 update_check_scheduler.cc:74] Next update check in 10m33s Oct 2 20:05:40.061113 systemd[1]: Started update-engine.service. Oct 2 20:05:40.066193 systemd[1]: Started locksmithd.service. Oct 2 20:05:40.074817 extend-filesystems[1687]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 20:05:40.074817 extend-filesystems[1687]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 20:05:40.074817 extend-filesystems[1687]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 20:05:40.074509 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:05:40.081596 extend-filesystems[1624]: Resized filesystem in /dev/nvme0n1p9 Oct 2 20:05:40.074724 systemd[1]: Finished extend-filesystems.service. Oct 2 20:05:40.091003 env[1643]: time="2023-10-02T20:05:40.089407891Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:05:40.123620 systemd-logind[1631]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 20:05:40.123651 systemd-logind[1631]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 20:05:40.123675 systemd-logind[1631]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:05:40.124044 systemd-logind[1631]: New seat seat0. Oct 2 20:05:40.126201 systemd[1]: Started systemd-logind.service. Oct 2 20:05:40.208022 tar[1635]: ./static Oct 2 20:05:40.215658 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:05:40.258178 env[1643]: time="2023-10-02T20:05:40.258117702Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:05:40.258419 env[1643]: time="2023-10-02T20:05:40.258375474Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:40.267305 env[1643]: time="2023-10-02T20:05:40.267248069Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:40.267305 env[1643]: time="2023-10-02T20:05:40.267302610Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:40.267642 env[1643]: time="2023-10-02T20:05:40.267608466Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:40.267720 env[1643]: time="2023-10-02T20:05:40.267641327Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:40.267720 env[1643]: time="2023-10-02T20:05:40.267680880Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:05:40.267720 env[1643]: time="2023-10-02T20:05:40.267699357Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:40.267832 env[1643]: time="2023-10-02T20:05:40.267802708Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:40.268302 env[1643]: time="2023-10-02T20:05:40.268270302Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:40.268608 env[1643]: time="2023-10-02T20:05:40.268574792Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:40.268678 env[1643]: time="2023-10-02T20:05:40.268608879Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:05:40.268723 env[1643]: time="2023-10-02T20:05:40.268681901Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:05:40.268723 env[1643]: time="2023-10-02T20:05:40.268699909Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:05:40.281947 env[1643]: time="2023-10-02T20:05:40.281899442Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:05:40.282073 env[1643]: time="2023-10-02T20:05:40.281967354Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:05:40.282073 env[1643]: time="2023-10-02T20:05:40.281987218Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:05:40.282073 env[1643]: time="2023-10-02T20:05:40.282039772Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282073 env[1643]: time="2023-10-02T20:05:40.282060218Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282270 env[1643]: time="2023-10-02T20:05:40.282079357Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282270 env[1643]: time="2023-10-02T20:05:40.282113060Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282270 env[1643]: time="2023-10-02T20:05:40.282146707Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282270 env[1643]: time="2023-10-02T20:05:40.282185619Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282270 env[1643]: time="2023-10-02T20:05:40.282206936Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282270 env[1643]: time="2023-10-02T20:05:40.282243011Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.282270 env[1643]: time="2023-10-02T20:05:40.282266380Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:05:40.282520 env[1643]: time="2023-10-02T20:05:40.282438755Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:05:40.282608 env[1643]: time="2023-10-02T20:05:40.282587153Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:05:40.283065 env[1643]: time="2023-10-02T20:05:40.283039285Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:05:40.283143 env[1643]: time="2023-10-02T20:05:40.283096048Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283143 env[1643]: time="2023-10-02T20:05:40.283119605Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:05:40.283260 env[1643]: time="2023-10-02T20:05:40.283192734Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283260 env[1643]: time="2023-10-02T20:05:40.283212586Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283260 env[1643]: time="2023-10-02T20:05:40.283254828Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283394 env[1643]: time="2023-10-02T20:05:40.283272170Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283394 env[1643]: time="2023-10-02T20:05:40.283291260Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283394 env[1643]: time="2023-10-02T20:05:40.283375299Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283501 env[1643]: time="2023-10-02T20:05:40.283402656Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283501 env[1643]: time="2023-10-02T20:05:40.283422461Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283501 env[1643]: time="2023-10-02T20:05:40.283460350Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:05:40.283685 env[1643]: time="2023-10-02T20:05:40.283654746Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283685 env[1643]: time="2023-10-02T20:05:40.283680412Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283779 env[1643]: time="2023-10-02T20:05:40.283699993Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.283779 env[1643]: time="2023-10-02T20:05:40.283717989Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:05:40.283779 env[1643]: time="2023-10-02T20:05:40.283740331Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:05:40.283886 env[1643]: time="2023-10-02T20:05:40.283777868Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:05:40.283886 env[1643]: time="2023-10-02T20:05:40.283808083Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:05:40.283886 env[1643]: time="2023-10-02T20:05:40.283851740Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:05:40.284238 env[1643]: time="2023-10-02T20:05:40.284148330Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:05:40.288686 env[1643]: time="2023-10-02T20:05:40.284253022Z" level=info msg="Connect containerd service" Oct 2 20:05:40.288686 env[1643]: time="2023-10-02T20:05:40.284295096Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:05:40.288378 systemd[1]: Started systemd-hostnamed.service. Oct 2 20:05:40.288159 dbus-daemon[1622]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 20:05:40.289297 dbus-daemon[1622]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1693 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:40.293685 systemd[1]: Starting polkit.service... Oct 2 20:05:40.298245 env[1643]: time="2023-10-02T20:05:40.297819767Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:05:40.301062 env[1643]: time="2023-10-02T20:05:40.300934603Z" level=info msg="Start subscribing containerd event" Oct 2 20:05:40.301172 env[1643]: time="2023-10-02T20:05:40.301094941Z" level=info msg="Start recovering state" Oct 2 20:05:40.301252 env[1643]: time="2023-10-02T20:05:40.301173412Z" level=info msg="Start event monitor" Oct 2 20:05:40.301252 env[1643]: time="2023-10-02T20:05:40.301202714Z" level=info msg="Start snapshots syncer" Oct 2 20:05:40.301252 env[1643]: time="2023-10-02T20:05:40.301235182Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:05:40.301252 env[1643]: time="2023-10-02T20:05:40.301246966Z" level=info msg="Start streaming server" Oct 2 20:05:40.302190 env[1643]: time="2023-10-02T20:05:40.302158108Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:05:40.302563 env[1643]: time="2023-10-02T20:05:40.302294107Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:05:40.302730 systemd[1]: Started containerd.service. Oct 2 20:05:40.314360 polkitd[1721]: Started polkitd version 121 Oct 2 20:05:40.335807 polkitd[1721]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 20:05:40.336062 polkitd[1721]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 20:05:40.367035 polkitd[1721]: Finished loading, compiling and executing 2 rules Oct 2 20:05:40.367962 dbus-daemon[1622]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 20:05:40.368181 systemd[1]: Started polkit.service. Oct 2 20:05:40.368666 polkitd[1721]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 20:05:40.373973 env[1643]: time="2023-10-02T20:05:40.373835447Z" level=info msg="containerd successfully booted in 0.384165s" Oct 2 20:05:40.383907 systemd-hostnamed[1693]: Hostname set to (transient) Oct 2 20:05:40.384021 systemd-resolved[1587]: System hostname changed to 'ip-172-31-30-99'. Oct 2 20:05:40.396571 tar[1635]: ./vlan Oct 2 20:05:40.472743 coreos-metadata[1621]: Oct 02 20:05:40.470 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 20:05:40.478468 coreos-metadata[1621]: Oct 02 20:05:40.478 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 20:05:40.479264 coreos-metadata[1621]: Oct 02 20:05:40.479 INFO Fetch successful Oct 2 20:05:40.479417 coreos-metadata[1621]: Oct 02 20:05:40.479 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 20:05:40.480042 coreos-metadata[1621]: Oct 02 20:05:40.479 INFO Fetch successful Oct 2 20:05:40.482439 unknown[1621]: wrote ssh authorized keys file for user: core Oct 2 20:05:40.502007 update-ssh-keys[1778]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:40.502742 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 20:05:40.571597 tar[1635]: ./portmap Oct 2 20:05:40.644163 amazon-ssm-agent[1619]: 2023-10-02 20:05:40 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0b6c1a9daf5ff9534 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0b6c1a9daf5ff9534 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:05:40.644163 amazon-ssm-agent[1619]: status code: 400, request id: 74da9110-abdf-45c6-8ccc-96545651bd19 Oct 2 20:05:40.644163 amazon-ssm-agent[1619]: 2023-10-02 20:05:40 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 20:05:40.656944 tar[1635]: ./host-local Oct 2 20:05:40.718854 tar[1635]: ./vrf Oct 2 20:05:40.774893 tar[1635]: ./bridge Oct 2 20:05:40.824110 tar[1635]: ./tuning Oct 2 20:05:40.863276 tar[1635]: ./firewall Oct 2 20:05:40.914049 tar[1635]: ./host-device Oct 2 20:05:40.957804 tar[1635]: ./sbr Oct 2 20:05:41.006977 tar[1635]: ./loopback Oct 2 20:05:41.029559 systemd[1]: Finished prepare-critools.service. Oct 2 20:05:41.048906 tar[1635]: ./dhcp Oct 2 20:05:41.158912 tar[1635]: ./ptp Oct 2 20:05:41.205392 tar[1635]: ./ipvlan Oct 2 20:05:41.250334 tar[1635]: ./bandwidth Oct 2 20:05:41.309121 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:05:41.470836 locksmithd[1703]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:05:41.646695 sshd_keygen[1671]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:05:41.670876 systemd[1]: Finished sshd-keygen.service. Oct 2 20:05:41.674141 systemd[1]: Starting issuegen.service... Oct 2 20:05:41.680870 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:05:41.681034 systemd[1]: Finished issuegen.service. Oct 2 20:05:41.683828 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:05:41.691544 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:05:41.694812 systemd[1]: Started getty@tty1.service. Oct 2 20:05:41.698582 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:05:41.700208 systemd[1]: Reached target getty.target. Oct 2 20:05:41.701900 systemd[1]: Reached target multi-user.target. Oct 2 20:05:41.704675 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:05:41.715812 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:05:41.715973 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:05:41.717520 systemd[1]: Startup finished in 937ms (kernel) + 11.082s (initrd) + 12.005s (userspace) = 24.025s. Oct 2 20:05:48.974571 systemd[1]: Created slice system-sshd.slice. Oct 2 20:05:48.976369 systemd[1]: Started sshd@0-172.31.30.99:22-139.178.89.65:50366.service. Oct 2 20:05:49.170526 sshd[1830]: Accepted publickey for core from 139.178.89.65 port 50366 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:49.173120 sshd[1830]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:49.184628 systemd[1]: Created slice user-500.slice. Oct 2 20:05:49.186270 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:05:49.190699 systemd-logind[1631]: New session 1 of user core. Oct 2 20:05:49.198633 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:05:49.200757 systemd[1]: Starting user@500.service... Oct 2 20:05:49.204719 (systemd)[1833]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:49.298082 systemd[1833]: Queued start job for default target default.target. Oct 2 20:05:49.298725 systemd[1833]: Reached target paths.target. Oct 2 20:05:49.298760 systemd[1833]: Reached target sockets.target. Oct 2 20:05:49.298779 systemd[1833]: Reached target timers.target. Oct 2 20:05:49.298795 systemd[1833]: Reached target basic.target. Oct 2 20:05:49.298917 systemd[1]: Started user@500.service. Oct 2 20:05:49.300617 systemd[1]: Started session-1.scope. Oct 2 20:05:49.301407 systemd[1833]: Reached target default.target. Oct 2 20:05:49.301622 systemd[1833]: Startup finished in 89ms. Oct 2 20:05:49.453383 systemd[1]: Started sshd@1-172.31.30.99:22-139.178.89.65:50378.service. Oct 2 20:05:49.613113 sshd[1842]: Accepted publickey for core from 139.178.89.65 port 50378 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:49.614548 sshd[1842]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:49.619901 systemd[1]: Started session-2.scope. Oct 2 20:05:49.620427 systemd-logind[1631]: New session 2 of user core. Oct 2 20:05:49.753725 sshd[1842]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:49.756767 systemd[1]: sshd@1-172.31.30.99:22-139.178.89.65:50378.service: Deactivated successfully. Oct 2 20:05:49.757623 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:05:49.758290 systemd-logind[1631]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:05:49.759115 systemd-logind[1631]: Removed session 2. Oct 2 20:05:49.779466 systemd[1]: Started sshd@2-172.31.30.99:22-139.178.89.65:50392.service. Oct 2 20:05:49.947124 sshd[1848]: Accepted publickey for core from 139.178.89.65 port 50392 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:49.949689 sshd[1848]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:49.963184 systemd-logind[1631]: New session 3 of user core. Oct 2 20:05:49.963860 systemd[1]: Started session-3.scope. Oct 2 20:05:50.093980 sshd[1848]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:50.097721 systemd[1]: sshd@2-172.31.30.99:22-139.178.89.65:50392.service: Deactivated successfully. Oct 2 20:05:50.098637 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:05:50.099353 systemd-logind[1631]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:05:50.100588 systemd-logind[1631]: Removed session 3. Oct 2 20:05:50.119625 systemd[1]: Started sshd@3-172.31.30.99:22-139.178.89.65:50408.service. Oct 2 20:05:50.279350 sshd[1854]: Accepted publickey for core from 139.178.89.65 port 50408 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:50.282756 sshd[1854]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.304214 systemd-logind[1631]: New session 4 of user core. Oct 2 20:05:50.304723 systemd[1]: Started session-4.scope. Oct 2 20:05:50.474731 sshd[1854]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:50.478537 systemd-logind[1631]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:05:50.478742 systemd[1]: sshd@3-172.31.30.99:22-139.178.89.65:50408.service: Deactivated successfully. Oct 2 20:05:50.479624 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:05:50.480430 systemd-logind[1631]: Removed session 4. Oct 2 20:05:50.499611 systemd[1]: Started sshd@4-172.31.30.99:22-139.178.89.65:50412.service. Oct 2 20:05:50.657645 sshd[1860]: Accepted publickey for core from 139.178.89.65 port 50412 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:50.659484 sshd[1860]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.665588 systemd[1]: Started session-5.scope. Oct 2 20:05:50.666238 systemd-logind[1631]: New session 5 of user core. Oct 2 20:05:50.805589 sudo[1863]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:05:50.805889 sudo[1863]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:50.823819 dbus-daemon[1622]: \xd0}]e*V: received setenforce notice (enforcing=2104251776) Oct 2 20:05:50.827454 sudo[1863]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:50.852421 sshd[1860]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:50.857673 systemd[1]: sshd@4-172.31.30.99:22-139.178.89.65:50412.service: Deactivated successfully. Oct 2 20:05:50.858781 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:05:50.859834 systemd-logind[1631]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:05:50.861563 systemd-logind[1631]: Removed session 5. Oct 2 20:05:50.889441 systemd[1]: Started sshd@5-172.31.30.99:22-139.178.89.65:50420.service. Oct 2 20:05:51.071554 sshd[1867]: Accepted publickey for core from 139.178.89.65 port 50420 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.076144 sshd[1867]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.083330 systemd-logind[1631]: New session 6 of user core. Oct 2 20:05:51.084834 systemd[1]: Started session-6.scope. Oct 2 20:05:51.203016 sudo[1871]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:05:51.203335 sudo[1871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:51.212358 sudo[1871]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:51.222015 sudo[1870]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:05:51.223141 sudo[1870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:51.236104 systemd[1]: Stopping audit-rules.service... Oct 2 20:05:51.236000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:51.238636 auditctl[1874]: No rules Oct 2 20:05:51.241267 kernel: kauditd_printk_skb: 182 callbacks suppressed Oct 2 20:05:51.241354 kernel: audit: type=1305 audit(1696277151.236:165): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:51.239178 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:05:51.239402 systemd[1]: Stopped audit-rules.service. Oct 2 20:05:51.245893 systemd[1]: Starting audit-rules.service... Oct 2 20:05:51.236000 audit[1874]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffff23fac20 a2=420 a3=0 items=0 ppid=1 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:51.264003 kernel: audit: type=1300 audit(1696277151.236:165): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffff23fac20 a2=420 a3=0 items=0 ppid=1 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:51.264146 kernel: audit: type=1327 audit(1696277151.236:165): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:51.236000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:51.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.271250 kernel: audit: type=1131 audit(1696277151.236:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.290472 augenrules[1891]: No rules Oct 2 20:05:51.291491 systemd[1]: Finished audit-rules.service. Oct 2 20:05:51.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.292717 sudo[1870]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:51.291000 audit[1870]: USER_END pid=1870 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.303274 kernel: audit: type=1130 audit(1696277151.290:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.303384 kernel: audit: type=1106 audit(1696277151.291:168): pid=1870 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.303525 kernel: audit: type=1104 audit(1696277151.291:169): pid=1870 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.291000 audit[1870]: CRED_DISP pid=1870 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.315373 sshd[1867]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:51.315000 audit[1867]: USER_END pid=1867 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.319530 systemd[1]: sshd@5-172.31.30.99:22-139.178.89.65:50420.service: Deactivated successfully. Oct 2 20:05:51.320454 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:05:51.325466 systemd-logind[1631]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:05:51.327630 systemd-logind[1631]: Removed session 6. Oct 2 20:05:51.328246 kernel: audit: type=1106 audit(1696277151.315:170): pid=1867 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.315000 audit[1867]: CRED_DISP pid=1867 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.99:22-139.178.89.65:50420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.340321 kernel: audit: type=1104 audit(1696277151.315:171): pid=1867 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.340422 kernel: audit: type=1131 audit(1696277151.318:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.99:22-139.178.89.65:50420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.350693 systemd[1]: Started sshd@6-172.31.30.99:22-139.178.89.65:50434.service. Oct 2 20:05:51.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.99:22-139.178.89.65:50434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.526000 audit[1897]: USER_ACCT pid=1897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.528448 sshd[1897]: Accepted publickey for core from 139.178.89.65 port 50434 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.528000 audit[1897]: CRED_ACQ pid=1897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.528000 audit[1897]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc01a43490 a2=3 a3=0 items=0 ppid=1 pid=1897 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:51.528000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:05:51.530204 sshd[1897]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.536619 systemd[1]: Started session-7.scope. Oct 2 20:05:51.537462 systemd-logind[1631]: New session 7 of user core. Oct 2 20:05:51.546000 audit[1897]: USER_START pid=1897 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.549000 audit[1899]: CRED_ACQ pid=1899 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:51.639000 audit[1900]: USER_ACCT pid=1900 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.639000 audit[1900]: CRED_REFR pid=1900 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:51.641084 sudo[1900]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:05:51.641402 sudo[1900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:51.644000 audit[1900]: USER_START pid=1900 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.333623 systemd[1]: Starting docker.service... Oct 2 20:05:52.394662 env[1915]: time="2023-10-02T20:05:52.394615542Z" level=info msg="Starting up" Oct 2 20:05:52.397557 env[1915]: time="2023-10-02T20:05:52.397478741Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:52.397703 env[1915]: time="2023-10-02T20:05:52.397688250Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:52.397768 env[1915]: time="2023-10-02T20:05:52.397756301Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:52.397810 env[1915]: time="2023-10-02T20:05:52.397801965Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:52.406720 env[1915]: time="2023-10-02T20:05:52.406668607Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:52.406720 env[1915]: time="2023-10-02T20:05:52.406697890Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:52.406720 env[1915]: time="2023-10-02T20:05:52.406721102Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:52.407775 env[1915]: time="2023-10-02T20:05:52.406733885Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:52.420459 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2177661787-merged.mount: Deactivated successfully. Oct 2 20:05:52.508047 env[1915]: time="2023-10-02T20:05:52.507999981Z" level=info msg="Loading containers: start." Oct 2 20:05:52.612000 audit[1945]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.612000 audit[1945]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff8dc95bd0 a2=0 a3=7fff8dc95bbc items=0 ppid=1915 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.612000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:05:52.621000 audit[1947]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.621000 audit[1947]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe87a39da0 a2=0 a3=7ffe87a39d8c items=0 ppid=1915 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.621000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:05:52.625000 audit[1949]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1949 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.625000 audit[1949]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffb7c73b00 a2=0 a3=7fffb7c73aec items=0 ppid=1915 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.625000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:52.633000 audit[1951]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1951 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.633000 audit[1951]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff3b848fa0 a2=0 a3=7fff3b848f8c items=0 ppid=1915 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.633000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:52.641000 audit[1953]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1953 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.641000 audit[1953]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc3d36a2d0 a2=0 a3=7ffc3d36a2bc items=0 ppid=1915 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.641000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:05:52.662000 audit[1958]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1958 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.662000 audit[1958]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd308bb0d0 a2=0 a3=7ffd308bb0bc items=0 ppid=1915 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:05:52.672000 audit[1960]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1960 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.672000 audit[1960]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcb47f54a0 a2=0 a3=7ffcb47f548c items=0 ppid=1915 pid=1960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.672000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:05:52.674000 audit[1962]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1962 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.674000 audit[1962]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffeb08f05e0 a2=0 a3=7ffeb08f05cc items=0 ppid=1915 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.674000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:05:52.677000 audit[1964]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1964 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.677000 audit[1964]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fff29647d10 a2=0 a3=7fff29647cfc items=0 ppid=1915 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.677000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:52.688000 audit[1968]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1968 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.688000 audit[1968]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc4f5e8b30 a2=0 a3=7ffc4f5e8b1c items=0 ppid=1915 pid=1968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.688000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:52.690000 audit[1969]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.690000 audit[1969]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcd63e1ed0 a2=0 a3=7ffcd63e1ebc items=0 ppid=1915 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.690000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:52.701256 kernel: Initializing XFRM netlink socket Oct 2 20:05:52.748536 env[1915]: time="2023-10-02T20:05:52.748494467Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:05:52.749713 (udev-worker)[1925]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:52.809000 audit[1977]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1977 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.809000 audit[1977]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffea07f7790 a2=0 a3=7ffea07f777c items=0 ppid=1915 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.809000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:05:52.884000 audit[1980]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.884000 audit[1980]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffebb893bb0 a2=0 a3=7ffebb893b9c items=0 ppid=1915 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.884000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:05:52.893000 audit[1983]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1983 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.893000 audit[1983]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffed44a2cc0 a2=0 a3=7ffed44a2cac items=0 ppid=1915 pid=1983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.893000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:52.896000 audit[1985]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1985 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.896000 audit[1985]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc2852a340 a2=0 a3=7ffc2852a32c items=0 ppid=1915 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.896000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:52.904000 audit[1987]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.904000 audit[1987]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe357e6540 a2=0 a3=7ffe357e652c items=0 ppid=1915 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.904000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:05:52.907000 audit[1989]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1989 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.907000 audit[1989]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd06015860 a2=0 a3=7ffd0601584c items=0 ppid=1915 pid=1989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.907000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:05:52.909000 audit[1991]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.909000 audit[1991]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffcf6951ae0 a2=0 a3=7ffcf6951acc items=0 ppid=1915 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.909000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:05:52.920000 audit[1994]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1994 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.920000 audit[1994]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe5e851920 a2=0 a3=7ffe5e85190c items=0 ppid=1915 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.920000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:05:52.930000 audit[1996]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.930000 audit[1996]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd55abe130 a2=0 a3=7ffd55abe11c items=0 ppid=1915 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.930000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:52.932000 audit[1998]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.932000 audit[1998]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd5863fdb0 a2=0 a3=7ffd5863fd9c items=0 ppid=1915 pid=1998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.932000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:52.935000 audit[2000]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.935000 audit[2000]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd7b912ef0 a2=0 a3=7ffd7b912edc items=0 ppid=1915 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.935000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:05:52.937049 systemd-networkd[1452]: docker0: Link UP Oct 2 20:05:52.955000 audit[2004]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2004 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.955000 audit[2004]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffeb8443a70 a2=0 a3=7ffeb8443a5c items=0 ppid=1915 pid=2004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.955000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:52.956000 audit[2005]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:52.956000 audit[2005]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffb74ddcf0 a2=0 a3=7fffb74ddcdc items=0 ppid=1915 pid=2005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.956000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:52.958587 env[1915]: time="2023-10-02T20:05:52.958545639Z" level=info msg="Loading containers: done." Oct 2 20:05:52.973639 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1688143519-merged.mount: Deactivated successfully. Oct 2 20:05:52.990630 env[1915]: time="2023-10-02T20:05:52.990579980Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:05:52.990872 env[1915]: time="2023-10-02T20:05:52.990845930Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:05:52.991004 env[1915]: time="2023-10-02T20:05:52.990981244Z" level=info msg="Daemon has completed initialization" Oct 2 20:05:53.013383 systemd[1]: Started docker.service. Oct 2 20:05:53.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:53.021421 env[1915]: time="2023-10-02T20:05:53.021347694Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:05:53.048551 systemd[1]: Reloading. Oct 2 20:05:53.142889 /usr/lib/systemd/system-generators/torcx-generator[2051]: time="2023-10-02T20:05:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:53.159522 /usr/lib/systemd/system-generators/torcx-generator[2051]: time="2023-10-02T20:05:53Z" level=info msg="torcx already run" Oct 2 20:05:53.262720 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:53.262741 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:53.288209 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit: BPF prog-id=37 op=LOAD Oct 2 20:05:53.376000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit: BPF prog-id=38 op=LOAD Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.377000 audit: BPF prog-id=39 op=LOAD Oct 2 20:05:53.377000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:05:53.377000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit: BPF prog-id=40 op=LOAD Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.378000 audit: BPF prog-id=41 op=LOAD Oct 2 20:05:53.378000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:05:53.378000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.379000 audit: BPF prog-id=42 op=LOAD Oct 2 20:05:53.379000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit: BPF prog-id=43 op=LOAD Oct 2 20:05:53.382000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit: BPF prog-id=44 op=LOAD Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.382000 audit: BPF prog-id=45 op=LOAD Oct 2 20:05:53.382000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:05:53.382000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit: BPF prog-id=46 op=LOAD Oct 2 20:05:53.383000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.383000 audit: BPF prog-id=47 op=LOAD Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit: BPF prog-id=48 op=LOAD Oct 2 20:05:53.384000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:05:53.384000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit: BPF prog-id=49 op=LOAD Oct 2 20:05:53.384000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit: BPF prog-id=50 op=LOAD Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.385000 audit: BPF prog-id=51 op=LOAD Oct 2 20:05:53.385000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:05:53.385000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.386000 audit: BPF prog-id=52 op=LOAD Oct 2 20:05:53.386000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:05:53.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.391000 audit: BPF prog-id=53 op=LOAD Oct 2 20:05:53.391000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.392000 audit: BPF prog-id=54 op=LOAD Oct 2 20:05:53.392000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:05:53.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:53.410465 systemd[1]: Started kubelet.service. Oct 2 20:05:53.521248 kubelet[2103]: E1002 20:05:53.521179 2103 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:05:53.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:05:53.524406 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:05:53.524580 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:05:53.989241 env[1643]: time="2023-10-02T20:05:53.989179434Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\"" Oct 2 20:05:54.697309 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2655673304.mount: Deactivated successfully. Oct 2 20:05:58.132612 env[1643]: time="2023-10-02T20:05:58.132551179Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:58.135121 env[1643]: time="2023-10-02T20:05:58.135077469Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:58.137336 env[1643]: time="2023-10-02T20:05:58.137289603Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:58.141280 env[1643]: time="2023-10-02T20:05:58.141211495Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:bb3eff7d20d94d44ffea47066a4400a70ede58abd9de01c80400817a955397b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:58.142857 env[1643]: time="2023-10-02T20:05:58.142727478Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\" returns image reference \"sha256:48f6f02f2e904b54753777e0487169939971458e169171892d46ca1579632d3f\"" Oct 2 20:05:58.163123 env[1643]: time="2023-10-02T20:05:58.162785096Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\"" Oct 2 20:06:01.352563 env[1643]: time="2023-10-02T20:06:01.352511285Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:01.356269 env[1643]: time="2023-10-02T20:06:01.356207853Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:01.359259 env[1643]: time="2023-10-02T20:06:01.359192773Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:01.361806 env[1643]: time="2023-10-02T20:06:01.361746339Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:44d63bed8020f7610851a1a653ad7c6df83bd02ad128303de939a39997854ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:01.362811 env[1643]: time="2023-10-02T20:06:01.362766404Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\" returns image reference \"sha256:2fdc9124e4ab3b396594897e15b74bfe70445ab8f9340ad81af657f2c971118f\"" Oct 2 20:06:01.380198 env[1643]: time="2023-10-02T20:06:01.380131002Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\"" Oct 2 20:06:03.451729 env[1643]: time="2023-10-02T20:06:03.451600826Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:03.454899 env[1643]: time="2023-10-02T20:06:03.454851864Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:03.457798 env[1643]: time="2023-10-02T20:06:03.457754312Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:03.460177 env[1643]: time="2023-10-02T20:06:03.460117378Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:207b36120eca76bf8607682a3ee37e12b5156b921a9379d776b297ab01ca8198,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:03.460863 env[1643]: time="2023-10-02T20:06:03.460825369Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\" returns image reference \"sha256:62a4b43588914100df65a99bb32d7c829fcc21b747a4ae400801eda76994ec7a\"" Oct 2 20:06:03.474003 env[1643]: time="2023-10-02T20:06:03.473960307Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\"" Oct 2 20:06:03.550314 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:06:03.564303 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 20:06:03.564405 kernel: audit: type=1130 audit(1696277163.549:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:03.564448 kernel: audit: type=1131 audit(1696277163.549:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:03.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:03.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:03.550566 systemd[1]: Stopped kubelet.service. Oct 2 20:06:03.553686 systemd[1]: Started kubelet.service. Oct 2 20:06:03.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:03.608568 kernel: audit: type=1130 audit(1696277163.552:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:03.686064 kubelet[2141]: E1002 20:06:03.686003 2141 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:06:03.690387 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:03.690554 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:03.689000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:03.698596 kernel: audit: type=1131 audit(1696277163.689:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:04.721008 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3666684763.mount: Deactivated successfully. Oct 2 20:06:05.312205 env[1643]: time="2023-10-02T20:06:05.312085679Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.314879 env[1643]: time="2023-10-02T20:06:05.314833873Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.316998 env[1643]: time="2023-10-02T20:06:05.316958697Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.318757 env[1643]: time="2023-10-02T20:06:05.318724745Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4a23f328943342be6a3eeda75cc7a01d175bcf8b096611c97d2aa14c843cf326,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.319153 env[1643]: time="2023-10-02T20:06:05.319121175Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\" returns image reference \"sha256:b2d7e01cd611a8a377680226224d6d7f70eea58e8e603b1874585a279866f6a2\"" Oct 2 20:06:05.333925 env[1643]: time="2023-10-02T20:06:05.333888428Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\"" Oct 2 20:06:05.843614 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1332962362.mount: Deactivated successfully. Oct 2 20:06:05.856303 env[1643]: time="2023-10-02T20:06:05.856250885Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.859176 env[1643]: time="2023-10-02T20:06:05.859132266Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.861036 env[1643]: time="2023-10-02T20:06:05.860990599Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.862972 env[1643]: time="2023-10-02T20:06:05.862924128Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:9001185023633d17a2f98ff69b6ff2615b8ea02a825adffa40422f51dfdcde9d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.863642 env[1643]: time="2023-10-02T20:06:05.863605475Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\" returns image reference \"sha256:4873874c08efc72e9729683a83ffbb7502ee729e9a5ac097723806ea7fa13517\"" Oct 2 20:06:05.876596 env[1643]: time="2023-10-02T20:06:05.876558022Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 20:06:06.764550 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount452428759.mount: Deactivated successfully. Oct 2 20:06:10.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:10.416088 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 20:06:10.428957 kernel: audit: type=1131 audit(1696277170.415:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:10.445942 kernel: audit: type=1334 audit(1696277170.441:420): prog-id=48 op=UNLOAD Oct 2 20:06:10.446183 kernel: audit: type=1334 audit(1696277170.441:421): prog-id=47 op=UNLOAD Oct 2 20:06:10.441000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:06:10.441000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:06:10.441000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:06:10.449510 kernel: audit: type=1334 audit(1696277170.441:422): prog-id=46 op=UNLOAD Oct 2 20:06:12.100852 env[1643]: time="2023-10-02T20:06:12.100798562Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.103623 env[1643]: time="2023-10-02T20:06:12.103576404Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.106250 env[1643]: time="2023-10-02T20:06:12.106179736Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.108253 env[1643]: time="2023-10-02T20:06:12.108181231Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.108806 env[1643]: time="2023-10-02T20:06:12.108772015Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 20:06:12.122409 env[1643]: time="2023-10-02T20:06:12.122366469Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 20:06:12.674172 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1404556685.mount: Deactivated successfully. Oct 2 20:06:13.441505 env[1643]: time="2023-10-02T20:06:13.441450620Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.444439 env[1643]: time="2023-10-02T20:06:13.444392243Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.446851 env[1643]: time="2023-10-02T20:06:13.446811469Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.448800 env[1643]: time="2023-10-02T20:06:13.448761043Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.449414 env[1643]: time="2023-10-02T20:06:13.449380319Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 20:06:13.800003 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:06:13.800280 systemd[1]: Stopped kubelet.service. Oct 2 20:06:13.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.807367 kernel: audit: type=1130 audit(1696277173.800:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.802355 systemd[1]: Started kubelet.service. Oct 2 20:06:13.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.818780 kernel: audit: type=1131 audit(1696277173.800:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.818973 kernel: audit: type=1130 audit(1696277173.800:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.951870 kubelet[2170]: E1002 20:06:13.951821 2170 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 20:06:13.963158 kernel: audit: type=1131 audit(1696277173.954:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:13.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:13.954611 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:13.954779 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:16.435984 systemd[1]: Stopped kubelet.service. Oct 2 20:06:16.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.447679 kernel: audit: type=1130 audit(1696277176.435:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.447807 kernel: audit: type=1131 audit(1696277176.435:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.463474 systemd[1]: Reloading. Oct 2 20:06:16.568935 /usr/lib/systemd/system-generators/torcx-generator[2249]: time="2023-10-02T20:06:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:16.569462 /usr/lib/systemd/system-generators/torcx-generator[2249]: time="2023-10-02T20:06:16Z" level=info msg="torcx already run" Oct 2 20:06:16.687364 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:16.687390 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:16.712131 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806871 kernel: audit: type=1400 audit(1696277176.796:429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.807015 kernel: audit: type=1400 audit(1696277176.796:430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.816750 kernel: audit: type=1400 audit(1696277176.796:431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.816872 kernel: audit: type=1400 audit(1696277176.796:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.822332 kernel: audit: type=1400 audit(1696277176.796:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.822434 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.827612 kernel: audit: type=1400 audit(1696277176.796:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.827672 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit: BPF prog-id=55 op=LOAD Oct 2 20:06:16.806000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit: BPF prog-id=56 op=LOAD Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit: BPF prog-id=57 op=LOAD Oct 2 20:06:16.806000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:06:16.806000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit: BPF prog-id=58 op=LOAD Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit: BPF prog-id=59 op=LOAD Oct 2 20:06:16.811000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:06:16.811000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.816000 audit: BPF prog-id=60 op=LOAD Oct 2 20:06:16.816000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:06:16.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit: BPF prog-id=61 op=LOAD Oct 2 20:06:16.828000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit: BPF prog-id=62 op=LOAD Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.828000 audit: BPF prog-id=63 op=LOAD Oct 2 20:06:16.828000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:06:16.828000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit: BPF prog-id=64 op=LOAD Oct 2 20:06:16.830000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit: BPF prog-id=65 op=LOAD Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.830000 audit: BPF prog-id=66 op=LOAD Oct 2 20:06:16.830000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:06:16.830000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.832000 audit: BPF prog-id=67 op=LOAD Oct 2 20:06:16.832000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.835000 audit: BPF prog-id=68 op=LOAD Oct 2 20:06:16.835000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:16.836000 audit: BPF prog-id=69 op=LOAD Oct 2 20:06:16.836000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:06:16.856000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.857755 systemd[1]: Started kubelet.service. Oct 2 20:06:16.922184 kubelet[2301]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 20:06:16.922632 kubelet[2301]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:16.922632 kubelet[2301]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:16.922745 kubelet[2301]: I1002 20:06:16.922701 2301 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:16.924457 kubelet[2301]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 20:06:16.924457 kubelet[2301]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:16.924457 kubelet[2301]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:17.422559 kubelet[2301]: I1002 20:06:17.422521 2301 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 20:06:17.422559 kubelet[2301]: I1002 20:06:17.422553 2301 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:17.422949 kubelet[2301]: I1002 20:06:17.422923 2301 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 20:06:17.431395 kubelet[2301]: I1002 20:06:17.431361 2301 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:17.434410 kubelet[2301]: I1002 20:06:17.434372 2301 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:17.434693 kubelet[2301]: I1002 20:06:17.434673 2301 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:17.434846 kubelet[2301]: I1002 20:06:17.434828 2301 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 20:06:17.435041 kubelet[2301]: I1002 20:06:17.434859 2301 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:06:17.435041 kubelet[2301]: I1002 20:06:17.434877 2301 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 20:06:17.435325 kubelet[2301]: I1002 20:06:17.435132 2301 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:17.436744 kubelet[2301]: E1002 20:06:17.436722 2301 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.30.99:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.439174 kubelet[2301]: I1002 20:06:17.439152 2301 kubelet.go:381] "Attempting to sync node with API server" Oct 2 20:06:17.439174 kubelet[2301]: I1002 20:06:17.439177 2301 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:17.439335 kubelet[2301]: I1002 20:06:17.439202 2301 kubelet.go:281] "Adding apiserver pod source" Oct 2 20:06:17.439335 kubelet[2301]: I1002 20:06:17.439216 2301 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:17.445548 kubelet[2301]: W1002 20:06:17.445474 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.31.30.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-99&limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.445787 kubelet[2301]: E1002 20:06:17.445772 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.30.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-99&limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.445994 kubelet[2301]: I1002 20:06:17.445979 2301 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:17.446125 kubelet[2301]: W1002 20:06:17.446089 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.31.30.99:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.446180 kubelet[2301]: E1002 20:06:17.446137 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.30.99:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.446620 kubelet[2301]: W1002 20:06:17.446604 2301 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:06:17.447349 kubelet[2301]: I1002 20:06:17.447326 2301 server.go:1175] "Started kubelet" Oct 2 20:06:17.447000 audit[2301]: AVC avc: denied { mac_admin } for pid=2301 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.447000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.447000 audit[2301]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000862de0 a1=c000ef27b0 a2=c000862db0 a3=25 items=0 ppid=1 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.447000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.447000 audit[2301]: AVC avc: denied { mac_admin } for pid=2301 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.447000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.447000 audit[2301]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e5aa00 a1=c000ef27c8 a2=c000862e70 a3=25 items=0 ppid=1 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.447000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.449576 kubelet[2301]: I1002 20:06:17.448752 2301 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:17.449576 kubelet[2301]: I1002 20:06:17.448800 2301 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:17.449576 kubelet[2301]: I1002 20:06:17.448872 2301 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:17.450001 kubelet[2301]: I1002 20:06:17.449983 2301 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:17.453473 kubelet[2301]: E1002 20:06:17.453299 2301 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-99.178a631b0a594add", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-99", UID:"ip-172-31-30-99", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-99"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 447303901, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 447303901, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.30.99:6443/api/v1/namespaces/default/events": dial tcp 172.31.30.99:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:06:17.453640 kubelet[2301]: E1002 20:06:17.453620 2301 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:17.453699 kubelet[2301]: E1002 20:06:17.453646 2301 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:17.454852 kubelet[2301]: I1002 20:06:17.454762 2301 server.go:438] "Adding debug handlers to kubelet server" Oct 2 20:06:17.456232 kubelet[2301]: I1002 20:06:17.456202 2301 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:06:17.458110 kubelet[2301]: I1002 20:06:17.457834 2301 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 20:06:17.459584 kubelet[2301]: E1002 20:06:17.458847 2301 controller.go:144] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.30.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-99?timeout=10s": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.459584 kubelet[2301]: W1002 20:06:17.458925 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.31.30.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.459584 kubelet[2301]: E1002 20:06:17.458973 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.30.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.459584 kubelet[2301]: E1002 20:06:17.459069 2301 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:17.465000 audit[2315]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.465000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffecbe8bcb0 a2=0 a3=7ffecbe8bc9c items=0 ppid=2301 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:17.469000 audit[2316]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.469000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc4605be80 a2=0 a3=7ffc4605be6c items=0 ppid=2301 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.469000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:17.475000 audit[2318]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.475000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc20f1a960 a2=0 a3=7ffc20f1a94c items=0 ppid=2301 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.475000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:17.497000 audit[2320]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.497000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd21648d50 a2=0 a3=7ffd21648d3c items=0 ppid=2301 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.497000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:17.518526 kubelet[2301]: I1002 20:06:17.518502 2301 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 20:06:17.518702 kubelet[2301]: I1002 20:06:17.518690 2301 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:17.518801 kubelet[2301]: I1002 20:06:17.518792 2301 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:17.518000 audit[2326]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.518000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc0923bc10 a2=0 a3=7ffc0923bbfc items=0 ppid=2301 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.518000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:06:17.519000 audit[2327]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.519000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffea8ed8d80 a2=0 a3=7ffea8ed8d6c items=0 ppid=2301 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.519000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:06:17.521700 kubelet[2301]: I1002 20:06:17.521676 2301 policy_none.go:49] "None policy: Start" Oct 2 20:06:17.522534 kubelet[2301]: I1002 20:06:17.522519 2301 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 20:06:17.522676 kubelet[2301]: I1002 20:06:17.522666 2301 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:17.532949 systemd[1]: Created slice kubepods.slice. Oct 2 20:06:17.537907 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:06:17.541032 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:06:17.541000 audit[2330]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.541000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff787765e0 a2=0 a3=7fff787765cc items=0 ppid=2301 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.541000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:06:17.547000 audit[2301]: AVC avc: denied { mac_admin } for pid=2301 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.547000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.547000 audit[2301]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000afe7e0 a1=c0008d6060 a2=c000afe7b0 a3=25 items=0 ppid=1 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.547000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.549190 kubelet[2301]: I1002 20:06:17.548336 2301 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:17.549190 kubelet[2301]: I1002 20:06:17.548409 2301 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:17.549190 kubelet[2301]: I1002 20:06:17.548618 2301 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:17.550171 kubelet[2301]: E1002 20:06:17.550152 2301 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-30-99\" not found" Oct 2 20:06:17.551000 audit[2333]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.551000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fffab0b56d0 a2=0 a3=7fffab0b56bc items=0 ppid=2301 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.551000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:06:17.552000 audit[2334]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.552000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffeebd41060 a2=0 a3=7ffeebd4104c items=0 ppid=2301 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:06:17.554000 audit[2335]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.554000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3124a180 a2=0 a3=7ffc3124a16c items=0 ppid=2301 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.554000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:17.556946 kubelet[2301]: E1002 20:06:17.556923 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:17.558522 kubelet[2301]: I1002 20:06:17.558507 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-99" Oct 2 20:06:17.559733 kubelet[2301]: E1002 20:06:17.559715 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.99:6443/api/v1/nodes\": dial tcp 172.31.30.99:6443: connect: connection refused" node="ip-172-31-30-99" Oct 2 20:06:17.559000 audit[2337]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.559000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcf658ffb0 a2=0 a3=7ffcf658ff9c items=0 ppid=2301 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.559000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:06:17.562000 audit[2340]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.562000 audit[2340]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffd68f3910 a2=0 a3=7fffd68f38fc items=0 ppid=2301 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:17.565000 audit[2342]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.565000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7fff8e1ad000 a2=0 a3=7fff8e1acfec items=0 ppid=2301 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:06:17.568000 audit[2344]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.568000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffd162dc9a0 a2=0 a3=7ffd162dc98c items=0 ppid=2301 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:06:17.571000 audit[2346]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2346 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.571000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffd81a44620 a2=0 a3=7ffd81a4460c items=0 ppid=2301 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.571000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:06:17.572746 kubelet[2301]: I1002 20:06:17.572730 2301 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:06:17.572000 audit[2347]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.572000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc8bcc1cf0 a2=0 a3=7ffc8bcc1cdc items=0 ppid=2301 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.572000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:17.573000 audit[2348]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.573000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeda32b7e0 a2=0 a3=7ffeda32b7cc items=0 ppid=2301 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.573000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:17.574000 audit[2349]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.574000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1a088960 a2=0 a3=7ffc1a08894c items=0 ppid=2301 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.574000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:17.575000 audit[2350]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.575000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffcdbcbb600 a2=0 a3=7ffcdbcbb5ec items=0 ppid=2301 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.575000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:06:17.575000 audit[2351]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.575000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffffa782bb0 a2=0 a3=7ffffa782b9c items=0 ppid=2301 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.575000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:17.577000 audit[2353]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.577000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffec513c950 a2=0 a3=7ffec513c93c items=0 ppid=2301 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.577000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:06:17.579000 audit[2354]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.579000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffc17bbe8f0 a2=0 a3=7ffc17bbe8dc items=0 ppid=2301 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.579000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:17.581000 audit[2356]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.581000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff7a4e09d0 a2=0 a3=7fff7a4e09bc items=0 ppid=2301 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.581000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:06:17.583000 audit[2357]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.583000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd39c066f0 a2=0 a3=7ffd39c066dc items=0 ppid=2301 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.583000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:06:17.584000 audit[2358]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.584000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7eab4b80 a2=0 a3=7fff7eab4b6c items=0 ppid=2301 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.584000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:17.587000 audit[2360]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.587000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd5742e610 a2=0 a3=7ffd5742e5fc items=0 ppid=2301 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.587000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:06:17.590000 audit[2362]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.590000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe4ea0c650 a2=0 a3=7ffe4ea0c63c items=0 ppid=2301 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.590000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:17.592000 audit[2364]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.592000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffe823f4800 a2=0 a3=7ffe823f47ec items=0 ppid=2301 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.592000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:06:17.594000 audit[2366]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.594000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7ffcb7bad8c0 a2=0 a3=7ffcb7bad8ac items=0 ppid=2301 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.594000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:06:17.598000 audit[2368]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.598000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7fffbcf91af0 a2=0 a3=7fffbcf91adc items=0 ppid=2301 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.598000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:06:17.600057 kubelet[2301]: I1002 20:06:17.600030 2301 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:06:17.600174 kubelet[2301]: I1002 20:06:17.600164 2301 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 20:06:17.600294 kubelet[2301]: I1002 20:06:17.600283 2301 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 20:06:17.600472 kubelet[2301]: E1002 20:06:17.600462 2301 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 20:06:17.601239 kubelet[2301]: W1002 20:06:17.601179 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.31.30.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.601379 kubelet[2301]: E1002 20:06:17.601367 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.30.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.600000 audit[2369]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.600000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe718b4810 a2=0 a3=7ffe718b47fc items=0 ppid=2301 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.600000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:17.602000 audit[2370]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.602000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa017e0a0 a2=0 a3=7fffa017e08c items=0 ppid=2301 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:17.603000 audit[2371]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.603000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffecde6c050 a2=0 a3=7ffecde6c03c items=0 ppid=2301 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.603000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:17.657418 kubelet[2301]: E1002 20:06:17.657372 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:17.659888 kubelet[2301]: E1002 20:06:17.659846 2301 controller.go:144] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.30.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-99?timeout=10s": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:17.702378 kubelet[2301]: I1002 20:06:17.701157 2301 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:17.703336 kubelet[2301]: I1002 20:06:17.703295 2301 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:17.710914 kubelet[2301]: I1002 20:06:17.710882 2301 status_manager.go:667] "Failed to get status for pod" podUID=bea62ba5541120ff05f1a89e3df1c0de pod="kube-system/kube-scheduler-ip-172-31-30-99" err="Get \"https://172.31.30.99:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-30-99\": dial tcp 172.31.30.99:6443: connect: connection refused" Oct 2 20:06:17.714009 kubelet[2301]: I1002 20:06:17.713984 2301 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:17.722337 kubelet[2301]: I1002 20:06:17.722309 2301 status_manager.go:667] "Failed to get status for pod" podUID=fb59619d5f490ef6f0bd27bb82e0629f pod="kube-system/kube-apiserver-ip-172-31-30-99" err="Get \"https://172.31.30.99:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-30-99\": dial tcp 172.31.30.99:6443: connect: connection refused" Oct 2 20:06:17.729126 systemd[1]: Created slice kubepods-burstable-podbea62ba5541120ff05f1a89e3df1c0de.slice. Oct 2 20:06:17.737156 kubelet[2301]: I1002 20:06:17.737122 2301 status_manager.go:667] "Failed to get status for pod" podUID=ce318cb2848e84a8b101c002b1ed610e pod="kube-system/kube-controller-manager-ip-172-31-30-99" err="Get \"https://172.31.30.99:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-30-99\": dial tcp 172.31.30.99:6443: connect: connection refused" Oct 2 20:06:17.743461 systemd[1]: Created slice kubepods-burstable-podfb59619d5f490ef6f0bd27bb82e0629f.slice. Oct 2 20:06:17.749054 systemd[1]: Created slice kubepods-burstable-podce318cb2848e84a8b101c002b1ed610e.slice. Oct 2 20:06:17.758352 kubelet[2301]: E1002 20:06:17.758282 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:17.760764 kubelet[2301]: I1002 20:06:17.760739 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fb59619d5f490ef6f0bd27bb82e0629f-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-99\" (UID: \"fb59619d5f490ef6f0bd27bb82e0629f\") " pod="kube-system/kube-apiserver-ip-172-31-30-99" Oct 2 20:06:17.760996 kubelet[2301]: I1002 20:06:17.760982 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fb59619d5f490ef6f0bd27bb82e0629f-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-99\" (UID: \"fb59619d5f490ef6f0bd27bb82e0629f\") " pod="kube-system/kube-apiserver-ip-172-31-30-99" Oct 2 20:06:17.761508 kubelet[2301]: I1002 20:06:17.761494 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:17.761718 kubelet[2301]: I1002 20:06:17.761705 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:17.761930 kubelet[2301]: I1002 20:06:17.761902 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:17.761999 kubelet[2301]: I1002 20:06:17.761957 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/bea62ba5541120ff05f1a89e3df1c0de-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-99\" (UID: \"bea62ba5541120ff05f1a89e3df1c0de\") " pod="kube-system/kube-scheduler-ip-172-31-30-99" Oct 2 20:06:17.761999 kubelet[2301]: I1002 20:06:17.761991 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fb59619d5f490ef6f0bd27bb82e0629f-ca-certs\") pod \"kube-apiserver-ip-172-31-30-99\" (UID: \"fb59619d5f490ef6f0bd27bb82e0629f\") " pod="kube-system/kube-apiserver-ip-172-31-30-99" Oct 2 20:06:17.762100 kubelet[2301]: I1002 20:06:17.762022 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:17.762100 kubelet[2301]: I1002 20:06:17.762061 2301 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:17.762426 kubelet[2301]: I1002 20:06:17.762406 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-99" Oct 2 20:06:17.762798 kubelet[2301]: E1002 20:06:17.762780 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.99:6443/api/v1/nodes\": dial tcp 172.31.30.99:6443: connect: connection refused" node="ip-172-31-30-99" Oct 2 20:06:17.859238 kubelet[2301]: E1002 20:06:17.859182 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:17.960282 kubelet[2301]: E1002 20:06:17.960095 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.041502 env[1643]: time="2023-10-02T20:06:18.041452107Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-99,Uid:bea62ba5541120ff05f1a89e3df1c0de,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:18.051001 env[1643]: time="2023-10-02T20:06:18.050952879Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-99,Uid:fb59619d5f490ef6f0bd27bb82e0629f,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:18.052083 env[1643]: time="2023-10-02T20:06:18.051913902Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-99,Uid:ce318cb2848e84a8b101c002b1ed610e,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:18.060911 kubelet[2301]: E1002 20:06:18.060875 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.061391 kubelet[2301]: E1002 20:06:18.061322 2301 controller.go:144] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.30.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-99?timeout=10s": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.162001 kubelet[2301]: E1002 20:06:18.161954 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.164370 kubelet[2301]: I1002 20:06:18.164344 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-99" Oct 2 20:06:18.164785 kubelet[2301]: E1002 20:06:18.164755 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.99:6443/api/v1/nodes\": dial tcp 172.31.30.99:6443: connect: connection refused" node="ip-172-31-30-99" Oct 2 20:06:18.262515 kubelet[2301]: E1002 20:06:18.262406 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.276397 kubelet[2301]: W1002 20:06:18.276336 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.31.30.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-99&limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.276397 kubelet[2301]: E1002 20:06:18.276401 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.30.99:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-99&limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.362767 kubelet[2301]: E1002 20:06:18.362724 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.369531 kubelet[2301]: W1002 20:06:18.369471 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.31.30.99:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.369531 kubelet[2301]: E1002 20:06:18.369534 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.30.99:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.378987 kubelet[2301]: W1002 20:06:18.378921 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.31.30.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.378987 kubelet[2301]: E1002 20:06:18.378988 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.30.99:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.416872 env[1643]: time="2023-10-02T20:06:18.416785816Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-99,Uid:bea62ba5541120ff05f1a89e3df1c0de,Namespace:kube-system,Attempt:0,} failed, error" error="failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com/containers/images/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\": dial tcp: lookup prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com: no such host" Oct 2 20:06:18.418346 kubelet[2301]: E1002 20:06:18.418001 2301 remote_runtime.go:222] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com/containers/images/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\": dial tcp: lookup prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com: no such host" Oct 2 20:06:18.418346 kubelet[2301]: E1002 20:06:18.418107 2301 kuberuntime_sandbox.go:71] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com/containers/images/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\": dial tcp: lookup prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com: no such host" pod="kube-system/kube-scheduler-ip-172-31-30-99" Oct 2 20:06:18.418346 kubelet[2301]: E1002 20:06:18.418162 2301 kuberuntime_manager.go:772] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to get sandbox image \"registry.k8s.io/pause:3.6\": failed to pull image \"registry.k8s.io/pause:3.6\": failed to pull and unpack image \"registry.k8s.io/pause:3.6\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \"https://prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com/containers/images/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\": dial tcp: lookup prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com: no such host" pod="kube-system/kube-scheduler-ip-172-31-30-99" Oct 2 20:06:18.418628 kubelet[2301]: E1002 20:06:18.418315 2301 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"kube-scheduler-ip-172-31-30-99_kube-system(bea62ba5541120ff05f1a89e3df1c0de)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"kube-scheduler-ip-172-31-30-99_kube-system(bea62ba5541120ff05f1a89e3df1c0de)\\\": rpc error: code = Unknown desc = failed to get sandbox image \\\"registry.k8s.io/pause:3.6\\\": failed to pull image \\\"registry.k8s.io/pause:3.6\\\": failed to pull and unpack image \\\"registry.k8s.io/pause:3.6\\\": failed to copy: httpReadSeeker: failed open: failed to do request: Get \\\"https://prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com/containers/images/sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee\\\": dial tcp: lookup prod-registry-k8s-io-us-west-2.s3.dualstack.us-west-2.amazonaws.com: no such host\"" pod="kube-system/kube-scheduler-ip-172-31-30-99" podUID=bea62ba5541120ff05f1a89e3df1c0de Oct 2 20:06:18.463584 kubelet[2301]: E1002 20:06:18.463546 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.564697 kubelet[2301]: E1002 20:06:18.564657 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.664983 kubelet[2301]: E1002 20:06:18.664943 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.765790 kubelet[2301]: E1002 20:06:18.765753 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.816506 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1666257934.mount: Deactivated successfully. Oct 2 20:06:18.836303 env[1643]: time="2023-10-02T20:06:18.836253146Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.840359 env[1643]: time="2023-10-02T20:06:18.840317229Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.845857 env[1643]: time="2023-10-02T20:06:18.845807166Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.846808 env[1643]: time="2023-10-02T20:06:18.846768866Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.851057 env[1643]: time="2023-10-02T20:06:18.851007426Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.861989 kubelet[2301]: E1002 20:06:18.861936 2301 controller.go:144] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.30.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-99?timeout=10s": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.865324 env[1643]: time="2023-10-02T20:06:18.865284509Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.866208 kubelet[2301]: E1002 20:06:18.866182 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.873196 env[1643]: time="2023-10-02T20:06:18.873151670Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.879585 env[1643]: time="2023-10-02T20:06:18.879537080Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.930331 env[1643]: time="2023-10-02T20:06:18.929945305Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:18.930331 env[1643]: time="2023-10-02T20:06:18.930004448Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:18.930331 env[1643]: time="2023-10-02T20:06:18.930020828Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:18.930855 env[1643]: time="2023-10-02T20:06:18.930440276Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d6da6f119bf0f8616ec623014a3cb89eae6198e47e4a4a47400552941002af69 pid=2379 runtime=io.containerd.runc.v2 Oct 2 20:06:18.945044 env[1643]: time="2023-10-02T20:06:18.944948106Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:18.945229 env[1643]: time="2023-10-02T20:06:18.945067688Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:18.945229 env[1643]: time="2023-10-02T20:06:18.945099744Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:18.945520 env[1643]: time="2023-10-02T20:06:18.945390876Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d741fb0a83a4867c96aff327d4b20045ac9abf256b9c05ecd9528e3f1999b865 pid=2396 runtime=io.containerd.runc.v2 Oct 2 20:06:18.948132 kubelet[2301]: W1002 20:06:18.948094 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.31.30.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.948263 kubelet[2301]: E1002 20:06:18.948145 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.30.99:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:18.970267 kubelet[2301]: E1002 20:06:18.966385 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:18.970267 kubelet[2301]: I1002 20:06:18.967636 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-99" Oct 2 20:06:18.970267 kubelet[2301]: E1002 20:06:18.968018 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.30.99:6443/api/v1/nodes\": dial tcp 172.31.30.99:6443: connect: connection refused" node="ip-172-31-30-99" Oct 2 20:06:18.967771 systemd[1]: Started cri-containerd-d6da6f119bf0f8616ec623014a3cb89eae6198e47e4a4a47400552941002af69.scope. Oct 2 20:06:18.985687 kubelet[2301]: E1002 20:06:18.985008 2301 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-30-99.178a631b0a594add", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-30-99", UID:"ip-172-31-30-99", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-30-99"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 447303901, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 447303901, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.30.99:6443/api/v1/namespaces/default/events": dial tcp 172.31.30.99:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:06:19.004725 systemd[1]: Started cri-containerd-d741fb0a83a4867c96aff327d4b20045ac9abf256b9c05ecd9528e3f1999b865.scope. Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.026000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.027000 audit: BPF prog-id=70 op=LOAD Oct 2 20:06:19.029000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.029000 audit[2392]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2379 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.029000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646136663131396266306638363136656336323330313461336362 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2379 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646136663131396266306638363136656336323330313461336362 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.030000 audit: BPF prog-id=71 op=LOAD Oct 2 20:06:19.030000 audit[2392]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024370 items=0 ppid=2379 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.030000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646136663131396266306638363136656336323330313461336362 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.032000 audit: BPF prog-id=72 op=LOAD Oct 2 20:06:19.032000 audit[2392]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000243b8 items=0 ppid=2379 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646136663131396266306638363136656336323330313461336362 Oct 2 20:06:19.034000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:06:19.034000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { perfmon } for pid=2392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit[2392]: AVC avc: denied { bpf } for pid=2392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.034000 audit: BPF prog-id=73 op=LOAD Oct 2 20:06:19.034000 audit[2392]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000247c8 items=0 ppid=2379 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.034000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436646136663131396266306638363136656336323330313461336362 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.040000 audit: BPF prog-id=74 op=LOAD Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2396 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437343166623061383361343836376339366166663332376434623230 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2396 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437343166623061383361343836376339366166663332376434623230 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit: BPF prog-id=75 op=LOAD Oct 2 20:06:19.041000 audit[2411]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024f70 items=0 ppid=2396 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437343166623061383361343836376339366166663332376434623230 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit: BPF prog-id=76 op=LOAD Oct 2 20:06:19.041000 audit[2411]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024fb8 items=0 ppid=2396 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437343166623061383361343836376339366166663332376434623230 Oct 2 20:06:19.041000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:06:19.041000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { perfmon } for pid=2411 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit[2411]: AVC avc: denied { bpf } for pid=2411 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.041000 audit: BPF prog-id=77 op=LOAD Oct 2 20:06:19.041000 audit[2411]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000253c8 items=0 ppid=2396 pid=2411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437343166623061383361343836376339366166663332376434623230 Oct 2 20:06:19.067369 kubelet[2301]: E1002 20:06:19.067203 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.104545 env[1643]: time="2023-10-02T20:06:19.102841813Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-99,Uid:fb59619d5f490ef6f0bd27bb82e0629f,Namespace:kube-system,Attempt:0,} returns sandbox id \"d741fb0a83a4867c96aff327d4b20045ac9abf256b9c05ecd9528e3f1999b865\"" Oct 2 20:06:19.121484 env[1643]: time="2023-10-02T20:06:19.121435221Z" level=info msg="CreateContainer within sandbox \"d741fb0a83a4867c96aff327d4b20045ac9abf256b9c05ecd9528e3f1999b865\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:06:19.127561 env[1643]: time="2023-10-02T20:06:19.127142202Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-99,Uid:ce318cb2848e84a8b101c002b1ed610e,Namespace:kube-system,Attempt:0,} returns sandbox id \"d6da6f119bf0f8616ec623014a3cb89eae6198e47e4a4a47400552941002af69\"" Oct 2 20:06:19.138579 env[1643]: time="2023-10-02T20:06:19.138538066Z" level=info msg="CreateContainer within sandbox \"d6da6f119bf0f8616ec623014a3cb89eae6198e47e4a4a47400552941002af69\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:06:19.154233 env[1643]: time="2023-10-02T20:06:19.153932994Z" level=info msg="CreateContainer within sandbox \"d741fb0a83a4867c96aff327d4b20045ac9abf256b9c05ecd9528e3f1999b865\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"c60b0636353a2f09bee91435301a5016410b1b576f58dc28148fbbfed82ad5bf\"" Oct 2 20:06:19.156904 env[1643]: time="2023-10-02T20:06:19.156875172Z" level=info msg="StartContainer for \"c60b0636353a2f09bee91435301a5016410b1b576f58dc28148fbbfed82ad5bf\"" Oct 2 20:06:19.167396 kubelet[2301]: E1002 20:06:19.167346 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.172975 env[1643]: time="2023-10-02T20:06:19.172901215Z" level=info msg="CreateContainer within sandbox \"d6da6f119bf0f8616ec623014a3cb89eae6198e47e4a4a47400552941002af69\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce\"" Oct 2 20:06:19.174454 env[1643]: time="2023-10-02T20:06:19.174419629Z" level=info msg="StartContainer for \"a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce\"" Oct 2 20:06:19.197946 systemd[1]: Started cri-containerd-c60b0636353a2f09bee91435301a5016410b1b576f58dc28148fbbfed82ad5bf.scope. Oct 2 20:06:19.228444 systemd[1]: Started cri-containerd-a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce.scope. Oct 2 20:06:19.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.233000 audit: BPF prog-id=78 op=LOAD Oct 2 20:06:19.235000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.235000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2396 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.235000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306230363336333533613266303962656539313433353330316135 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2396 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306230363336333533613266303962656539313433353330316135 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit: BPF prog-id=79 op=LOAD Oct 2 20:06:19.236000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00030ae00 items=0 ppid=2396 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306230363336333533613266303962656539313433353330316135 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit: BPF prog-id=80 op=LOAD Oct 2 20:06:19.236000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00030ae48 items=0 ppid=2396 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306230363336333533613266303962656539313433353330316135 Oct 2 20:06:19.236000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:06:19.236000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { perfmon } for pid=2462 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit[2462]: AVC avc: denied { bpf } for pid=2462 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.236000 audit: BPF prog-id=81 op=LOAD Oct 2 20:06:19.236000 audit[2462]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00030b258 items=0 ppid=2396 pid=2462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6336306230363336333533613266303962656539313433353330316135 Oct 2 20:06:19.268496 kubelet[2301]: E1002 20:06:19.268422 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.278000 audit: BPF prog-id=82 op=LOAD Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2379 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663261326633356234313434653435656132326533663333396237 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2379 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663261326633356234313434653435656132326533663333396237 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit: BPF prog-id=83 op=LOAD Oct 2 20:06:19.279000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00034c6b0 items=0 ppid=2379 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663261326633356234313434653435656132326533663333396237 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.279000 audit: BPF prog-id=84 op=LOAD Oct 2 20:06:19.279000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00034c6f8 items=0 ppid=2379 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663261326633356234313434653435656132326533663333396237 Oct 2 20:06:19.279000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:06:19.280000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { perfmon } for pid=2480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit[2480]: AVC avc: denied { bpf } for pid=2480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.280000 audit: BPF prog-id=85 op=LOAD Oct 2 20:06:19.280000 audit[2480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00034cb08 items=0 ppid=2379 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139663261326633356234313434653435656132326533663333396237 Oct 2 20:06:19.340455 env[1643]: time="2023-10-02T20:06:19.340190520Z" level=info msg="StartContainer for \"c60b0636353a2f09bee91435301a5016410b1b576f58dc28148fbbfed82ad5bf\" returns successfully" Oct 2 20:06:19.363367 env[1643]: time="2023-10-02T20:06:19.363329134Z" level=info msg="StartContainer for \"a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce\" returns successfully" Oct 2 20:06:19.368933 kubelet[2301]: E1002 20:06:19.368880 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.473804 kubelet[2301]: E1002 20:06:19.472769 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.474751 kubelet[2301]: E1002 20:06:19.474679 2301 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.30.99:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.30.99:6443: connect: connection refused Oct 2 20:06:19.575597 kubelet[2301]: E1002 20:06:19.575542 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.614067 kubelet[2301]: I1002 20:06:19.613972 2301 status_manager.go:667] "Failed to get status for pod" podUID=fb59619d5f490ef6f0bd27bb82e0629f pod="kube-system/kube-apiserver-ip-172-31-30-99" err="Get \"https://172.31.30.99:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-30-99\": dial tcp 172.31.30.99:6443: connect: connection refused" Oct 2 20:06:19.618909 kubelet[2301]: I1002 20:06:19.618879 2301 status_manager.go:667] "Failed to get status for pod" podUID=ce318cb2848e84a8b101c002b1ed610e pod="kube-system/kube-controller-manager-ip-172-31-30-99" err="Get \"https://172.31.30.99:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-30-99\": dial tcp 172.31.30.99:6443: connect: connection refused" Oct 2 20:06:19.676181 kubelet[2301]: E1002 20:06:19.676144 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.777312 kubelet[2301]: E1002 20:06:19.777277 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.878345 kubelet[2301]: E1002 20:06:19.878233 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:19.979111 kubelet[2301]: E1002 20:06:19.979077 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.080188 kubelet[2301]: E1002 20:06:20.080152 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.180597 kubelet[2301]: E1002 20:06:20.180487 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.281495 kubelet[2301]: E1002 20:06:20.281387 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.382250 kubelet[2301]: E1002 20:06:20.382204 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.396000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:20.396000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0003f0000 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:06:20.396000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:20.397000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:20.397000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ef6080 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:06:20.397000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:20.482663 kubelet[2301]: E1002 20:06:20.482558 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.570600 kubelet[2301]: I1002 20:06:20.570573 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-99" Oct 2 20:06:20.583684 kubelet[2301]: E1002 20:06:20.583626 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.684718 kubelet[2301]: E1002 20:06:20.684682 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.785792 kubelet[2301]: E1002 20:06:20.785676 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.886836 kubelet[2301]: E1002 20:06:20.886797 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:20.987523 kubelet[2301]: E1002 20:06:20.987480 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.088297 kubelet[2301]: E1002 20:06:21.088260 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.189126 kubelet[2301]: E1002 20:06:21.189088 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.290182 kubelet[2301]: E1002 20:06:21.290140 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.391675 kubelet[2301]: E1002 20:06:21.391305 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.491953 kubelet[2301]: E1002 20:06:21.491906 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.592701 kubelet[2301]: E1002 20:06:21.592664 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.693567 kubelet[2301]: E1002 20:06:21.693449 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.794261 kubelet[2301]: E1002 20:06:21.794207 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:21.895082 kubelet[2301]: E1002 20:06:21.895044 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.001658 kubelet[2301]: E1002 20:06:22.001538 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.102615 kubelet[2301]: E1002 20:06:22.102568 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.203360 kubelet[2301]: E1002 20:06:22.203311 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.304555 kubelet[2301]: E1002 20:06:22.304518 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.405536 kubelet[2301]: E1002 20:06:22.405501 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.506497 kubelet[2301]: E1002 20:06:22.506458 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.555931 kubelet[2301]: E1002 20:06:22.555590 2301 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:22.607062 kubelet[2301]: E1002 20:06:22.607023 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.707974 kubelet[2301]: E1002 20:06:22.707846 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.808926 kubelet[2301]: E1002 20:06:22.808815 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:22.909943 kubelet[2301]: E1002 20:06:22.909897 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:23.011023 kubelet[2301]: E1002 20:06:23.010986 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:23.093000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.096813 kernel: kauditd_printk_skb: 512 callbacks suppressed Oct 2 20:06:23.096931 kernel: audit: type=1400 audit(1696277183.093:711): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.111905 kernel: audit: type=1300 audit(1696277183.093:711): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c007054000 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.093000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c007054000 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.112179 kubelet[2301]: E1002 20:06:23.111538 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:23.093000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.126187 kernel: audit: type=1327 audit(1696277183.093:711): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.126329 kernel: audit: type=1400 audit(1696277183.093:712): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.093000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.093000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c002798080 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.136500 kernel: audit: type=1300 audit(1696277183.093:712): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c002798080 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.093000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.151814 kernel: audit: type=1327 audit(1696277183.093:712): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.151932 kernel: audit: type=1400 audit(1696277183.095:713): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.095000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.161563 kernel: audit: type=1300 audit(1696277183.095:713): arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c007054330 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.095000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c007054330 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.169666 kernel: audit: type=1327 audit(1696277183.095:713): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.095000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.177537 kernel: audit: type=1400 audit(1696277183.117:714): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.117000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.117000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c007054db0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.117000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.122000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.122000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c0027cbd60 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.122000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:23.122000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4d a1=c005162030 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:06:23.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:06:23.216399 kubelet[2301]: E1002 20:06:23.216363 2301 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-30-99\" not found" Oct 2 20:06:23.232730 kubelet[2301]: E1002 20:06:23.232663 2301 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-30-99\" not found" node="ip-172-31-30-99" Oct 2 20:06:23.259468 kubelet[2301]: I1002 20:06:23.259329 2301 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-30-99" Oct 2 20:06:23.449398 kubelet[2301]: I1002 20:06:23.449206 2301 apiserver.go:52] "Watching apiserver" Oct 2 20:06:23.518279 kubelet[2301]: I1002 20:06:23.518146 2301 reconciler.go:169] "Reconciler: start to sync state" Oct 2 20:06:25.699012 update_engine[1632]: I1002 20:06:25.698940 1632 update_attempter.cc:505] Updating boot flags... Oct 2 20:06:25.985065 systemd[1]: Reloading. Oct 2 20:06:26.127246 /usr/lib/systemd/system-generators/torcx-generator[2648]: time="2023-10-02T20:06:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:26.127283 /usr/lib/systemd/system-generators/torcx-generator[2648]: time="2023-10-02T20:06:26Z" level=info msg="torcx already run" Oct 2 20:06:26.249489 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:26.249512 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:26.275291 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.378000 audit: BPF prog-id=86 op=LOAD Oct 2 20:06:26.378000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit: BPF prog-id=87 op=LOAD Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.379000 audit: BPF prog-id=88 op=LOAD Oct 2 20:06:26.379000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:06:26.379000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.381000 audit: BPF prog-id=89 op=LOAD Oct 2 20:06:26.381000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit: BPF prog-id=90 op=LOAD Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit: BPF prog-id=91 op=LOAD Oct 2 20:06:26.382000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:06:26.382000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.383000 audit: BPF prog-id=92 op=LOAD Oct 2 20:06:26.383000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit: BPF prog-id=93 op=LOAD Oct 2 20:06:26.387000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit: BPF prog-id=94 op=LOAD Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.387000 audit: BPF prog-id=95 op=LOAD Oct 2 20:06:26.387000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:06:26.387000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:06:26.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit: BPF prog-id=96 op=LOAD Oct 2 20:06:26.389000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit: BPF prog-id=97 op=LOAD Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.389000 audit: BPF prog-id=98 op=LOAD Oct 2 20:06:26.389000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:06:26.389000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.391000 audit: BPF prog-id=99 op=LOAD Oct 2 20:06:26.391000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.395000 audit: BPF prog-id=100 op=LOAD Oct 2 20:06:26.395000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit: BPF prog-id=101 op=LOAD Oct 2 20:06:26.397000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.397000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.398000 audit: BPF prog-id=102 op=LOAD Oct 2 20:06:26.398000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.400000 audit: BPF prog-id=103 op=LOAD Oct 2 20:06:26.400000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.401000 audit: BPF prog-id=104 op=LOAD Oct 2 20:06:26.401000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:06:26.425804 systemd[1]: Stopping kubelet.service... Oct 2 20:06:26.441593 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:06:26.441839 systemd[1]: Stopped kubelet.service. Oct 2 20:06:26.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.444101 systemd[1]: Started kubelet.service. Oct 2 20:06:26.556590 kubelet[2700]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 20:06:26.556590 kubelet[2700]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:26.556590 kubelet[2700]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:26.556590 kubelet[2700]: I1002 20:06:26.548306 2700 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:26.556590 kubelet[2700]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 20:06:26.556590 kubelet[2700]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:26.556590 kubelet[2700]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:26.561504 kubelet[2700]: I1002 20:06:26.557782 2700 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 20:06:26.561504 kubelet[2700]: I1002 20:06:26.557857 2700 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:26.561504 kubelet[2700]: I1002 20:06:26.558179 2700 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 20:06:26.562788 kubelet[2700]: I1002 20:06:26.562747 2700 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:06:26.570093 kubelet[2700]: I1002 20:06:26.570055 2700 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:26.572600 kubelet[2700]: I1002 20:06:26.572573 2700 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:26.572811 kubelet[2700]: I1002 20:06:26.572793 2700 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:26.572914 kubelet[2700]: I1002 20:06:26.572896 2700 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 20:06:26.573029 kubelet[2700]: I1002 20:06:26.572924 2700 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:06:26.573029 kubelet[2700]: I1002 20:06:26.572940 2700 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 20:06:26.573029 kubelet[2700]: I1002 20:06:26.572979 2700 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:26.580407 kubelet[2700]: I1002 20:06:26.580381 2700 kubelet.go:381] "Attempting to sync node with API server" Oct 2 20:06:26.580631 kubelet[2700]: I1002 20:06:26.580618 2700 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:26.581546 kubelet[2700]: I1002 20:06:26.581531 2700 kubelet.go:281] "Adding apiserver pod source" Oct 2 20:06:26.581654 kubelet[2700]: I1002 20:06:26.581646 2700 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:26.583118 kubelet[2700]: I1002 20:06:26.583100 2700 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:26.583846 kubelet[2700]: I1002 20:06:26.583830 2700 server.go:1175] "Started kubelet" Oct 2 20:06:26.584000 audit[2700]: AVC avc: denied { mac_admin } for pid=2700 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.584000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:26.584000 audit[2700]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007e17d0 a1=c0007deb70 a2=c0007e17a0 a3=25 items=0 ppid=1 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:26.584000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:26.586574 kubelet[2700]: I1002 20:06:26.586559 2700 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:26.585000 audit[2700]: AVC avc: denied { mac_admin } for pid=2700 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.585000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:26.585000 audit[2700]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b0aac0 a1=c0007deb88 a2=c0007e1860 a3=25 items=0 ppid=1 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:26.585000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:26.587304 kubelet[2700]: I1002 20:06:26.587291 2700 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:26.590303 kubelet[2700]: I1002 20:06:26.590283 2700 server.go:438] "Adding debug handlers to kubelet server" Oct 2 20:06:26.595000 audit[2713]: USER_ACCT pid=2713 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.595000 audit[2713]: CRED_REFR pid=2713 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.600427 kubelet[2700]: I1002 20:06:26.598784 2700 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:26.600427 kubelet[2700]: I1002 20:06:26.598820 2700 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:26.596835 sudo[2713]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:06:26.597136 sudo[2713]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:06:26.601000 audit[2713]: USER_START pid=2713 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.619910 kubelet[2700]: I1002 20:06:26.619878 2700 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:06:26.621924 kubelet[2700]: I1002 20:06:26.621886 2700 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 20:06:26.641275 kubelet[2700]: E1002 20:06:26.641248 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:26.646997 kubelet[2700]: E1002 20:06:26.646970 2700 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:26.646997 kubelet[2700]: E1002 20:06:26.647004 2700 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:26.743158 kubelet[2700]: I1002 20:06:26.743107 2700 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-30-99" Oct 2 20:06:26.832772 kubelet[2700]: I1002 20:06:26.831193 2700 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-30-99" Oct 2 20:06:26.832772 kubelet[2700]: I1002 20:06:26.831290 2700 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-30-99" Oct 2 20:06:26.860782 kubelet[2700]: I1002 20:06:26.860745 2700 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 20:06:26.860782 kubelet[2700]: I1002 20:06:26.860779 2700 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:26.860986 kubelet[2700]: I1002 20:06:26.860801 2700 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:26.860986 kubelet[2700]: I1002 20:06:26.860983 2700 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:06:26.861067 kubelet[2700]: I1002 20:06:26.861002 2700 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:06:26.861067 kubelet[2700]: I1002 20:06:26.861012 2700 policy_none.go:49] "None policy: Start" Oct 2 20:06:26.862022 kubelet[2700]: I1002 20:06:26.861991 2700 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:06:26.863392 kubelet[2700]: I1002 20:06:26.863372 2700 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 20:06:26.863494 kubelet[2700]: I1002 20:06:26.863401 2700 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:26.863601 kubelet[2700]: I1002 20:06:26.863588 2700 state_mem.go:75] "Updated machine memory state" Oct 2 20:06:26.874735 kubelet[2700]: I1002 20:06:26.874706 2700 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:26.873000 audit[2700]: AVC avc: denied { mac_admin } for pid=2700 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.873000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:26.873000 audit[2700]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e64db0 a1=c000bbf758 a2=c000e64d80 a3=25 items=0 ppid=1 pid=2700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:26.873000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:26.875143 kubelet[2700]: I1002 20:06:26.874805 2700 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:26.875143 kubelet[2700]: I1002 20:06:26.875066 2700 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:26.955420 kubelet[2700]: I1002 20:06:26.955394 2700 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:06:26.955624 kubelet[2700]: I1002 20:06:26.955613 2700 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 20:06:26.955873 kubelet[2700]: I1002 20:06:26.955862 2700 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 20:06:26.955997 kubelet[2700]: E1002 20:06:26.955989 2700 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 20:06:27.056534 kubelet[2700]: I1002 20:06:27.056493 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:27.056892 kubelet[2700]: I1002 20:06:27.056876 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:27.057439 kubelet[2700]: I1002 20:06:27.057421 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:27.143472 kubelet[2700]: I1002 20:06:27.143335 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/bea62ba5541120ff05f1a89e3df1c0de-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-99\" (UID: \"bea62ba5541120ff05f1a89e3df1c0de\") " pod="kube-system/kube-scheduler-ip-172-31-30-99" Oct 2 20:06:27.143472 kubelet[2700]: I1002 20:06:27.143401 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fb59619d5f490ef6f0bd27bb82e0629f-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-99\" (UID: \"fb59619d5f490ef6f0bd27bb82e0629f\") " pod="kube-system/kube-apiserver-ip-172-31-30-99" Oct 2 20:06:27.143472 kubelet[2700]: I1002 20:06:27.143435 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fb59619d5f490ef6f0bd27bb82e0629f-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-99\" (UID: \"fb59619d5f490ef6f0bd27bb82e0629f\") " pod="kube-system/kube-apiserver-ip-172-31-30-99" Oct 2 20:06:27.143472 kubelet[2700]: I1002 20:06:27.143468 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:27.143979 kubelet[2700]: I1002 20:06:27.143498 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:27.143979 kubelet[2700]: I1002 20:06:27.143530 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:27.143979 kubelet[2700]: I1002 20:06:27.143590 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:27.143979 kubelet[2700]: I1002 20:06:27.143621 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fb59619d5f490ef6f0bd27bb82e0629f-ca-certs\") pod \"kube-apiserver-ip-172-31-30-99\" (UID: \"fb59619d5f490ef6f0bd27bb82e0629f\") " pod="kube-system/kube-apiserver-ip-172-31-30-99" Oct 2 20:06:27.143979 kubelet[2700]: I1002 20:06:27.143751 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ce318cb2848e84a8b101c002b1ed610e-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-99\" (UID: \"ce318cb2848e84a8b101c002b1ed610e\") " pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:27.143000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521282 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:06:27.143000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000da4680 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:06:27.143000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:27.398710 env[1643]: time="2023-10-02T20:06:27.398505813Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-99,Uid:bea62ba5541120ff05f1a89e3df1c0de,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:27.440711 env[1643]: time="2023-10-02T20:06:27.440152206Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:27.440711 env[1643]: time="2023-10-02T20:06:27.440384118Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:27.440711 env[1643]: time="2023-10-02T20:06:27.440443943Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:27.442264 env[1643]: time="2023-10-02T20:06:27.441118374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/de28bd01a0e50b3ab97590de764e2bc287c6321e38cc5bf3ad97ee369a240478 pid=2767 runtime=io.containerd.runc.v2 Oct 2 20:06:27.477820 systemd[1]: Started cri-containerd-de28bd01a0e50b3ab97590de764e2bc287c6321e38cc5bf3ad97ee369a240478.scope. Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.540000 audit: BPF prog-id=105 op=LOAD Oct 2 20:06:27.542000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.542000 audit[2777]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2767 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323862643031613065353062336162393735393064653736346532 Oct 2 20:06:27.542000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.542000 audit[2777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2767 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.542000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323862643031613065353062336162393735393064653736346532 Oct 2 20:06:27.542000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:27.542000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8ac20 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:06:27.542000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.543000 audit: BPF prog-id=106 op=LOAD Oct 2 20:06:27.543000 audit[2777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000282520 items=0 ppid=2767 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.543000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323862643031613065353062336162393735393064653736346532 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:27.544000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8ad80 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:06:27.544000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.544000 audit: BPF prog-id=107 op=LOAD Oct 2 20:06:27.544000 audit[2777]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000282568 items=0 ppid=2767 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323862643031613065353062336162393735393064653736346532 Oct 2 20:06:27.546000 audit: BPF prog-id=107 op=UNLOAD Oct 2 20:06:27.546000 audit: BPF prog-id=106 op=UNLOAD Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { perfmon } for pid=2777 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit[2777]: AVC avc: denied { bpf } for pid=2777 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.546000 audit: BPF prog-id=108 op=LOAD Oct 2 20:06:27.546000 audit[2777]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000282978 items=0 ppid=2767 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465323862643031613065353062336162393735393064653736346532 Oct 2 20:06:27.548000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:27.548000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8af00 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:06:27.548000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:27.549000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:27.549000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000ef6140 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:06:27.549000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:27.605687 kubelet[2700]: I1002 20:06:27.605328 2700 apiserver.go:52] "Watching apiserver" Oct 2 20:06:27.626249 env[1643]: time="2023-10-02T20:06:27.622087132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-99,Uid:bea62ba5541120ff05f1a89e3df1c0de,Namespace:kube-system,Attempt:0,} returns sandbox id \"de28bd01a0e50b3ab97590de764e2bc287c6321e38cc5bf3ad97ee369a240478\"" Oct 2 20:06:27.636671 env[1643]: time="2023-10-02T20:06:27.636631225Z" level=info msg="CreateContainer within sandbox \"de28bd01a0e50b3ab97590de764e2bc287c6321e38cc5bf3ad97ee369a240478\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:06:27.648406 kubelet[2700]: I1002 20:06:27.648371 2700 reconciler.go:169] "Reconciler: start to sync state" Oct 2 20:06:27.659162 env[1643]: time="2023-10-02T20:06:27.659054061Z" level=info msg="CreateContainer within sandbox \"de28bd01a0e50b3ab97590de764e2bc287c6321e38cc5bf3ad97ee369a240478\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8\"" Oct 2 20:06:27.660490 env[1643]: time="2023-10-02T20:06:27.660446638Z" level=info msg="StartContainer for \"cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8\"" Oct 2 20:06:27.700630 sudo[2713]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:27.700000 audit[2713]: USER_END pid=2713 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:27.700000 audit[2713]: CRED_DISP pid=2713 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:27.727554 systemd[1]: Started cri-containerd-cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8.scope. Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.854000 audit: BPF prog-id=109 op=LOAD Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2767 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363333730353837616661346130623264316263623737383362383838 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2767 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363333730353837616661346130623264316263623737383362383838 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit: BPF prog-id=110 op=LOAD Oct 2 20:06:27.855000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ca090 items=0 ppid=2767 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363333730353837616661346130623264316263623737383362383838 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit: BPF prog-id=111 op=LOAD Oct 2 20:06:27.855000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ca0d8 items=0 ppid=2767 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363333730353837616661346130623264316263623737383362383838 Oct 2 20:06:27.855000 audit: BPF prog-id=111 op=UNLOAD Oct 2 20:06:27.855000 audit: BPF prog-id=110 op=UNLOAD Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { perfmon } for pid=2807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit[2807]: AVC avc: denied { bpf } for pid=2807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:27.855000 audit: BPF prog-id=112 op=LOAD Oct 2 20:06:27.855000 audit[2807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ca4e8 items=0 ppid=2767 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:27.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363333730353837616661346130623264316263623737383362383838 Oct 2 20:06:27.953566 env[1643]: time="2023-10-02T20:06:27.953419175Z" level=info msg="StartContainer for \"cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8\" returns successfully" Oct 2 20:06:27.990771 kubelet[2700]: E1002 20:06:27.989289 2700 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-30-99\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-30-99" Oct 2 20:06:27.990771 kubelet[2700]: E1002 20:06:27.990134 2700 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-30-99\" already exists" pod="kube-system/kube-apiserver-ip-172-31-30-99" Oct 2 20:06:29.479614 sudo[1900]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:29.479000 audit[1900]: USER_END pid=1900 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.481010 kernel: kauditd_printk_skb: 376 callbacks suppressed Oct 2 20:06:29.481184 kernel: audit: type=1106 audit(1696277189.479:988): pid=1900 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.487000 audit[1900]: CRED_DISP pid=1900 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.493255 kernel: audit: type=1104 audit(1696277189.487:989): pid=1900 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.516642 sshd[1897]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:29.520520 systemd[1]: sshd@6-172.31.30.99:22-139.178.89.65:50434.service: Deactivated successfully. Oct 2 20:06:29.518000 audit[1897]: USER_END pid=1897 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:29.523929 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:06:29.524132 systemd[1]: session-7.scope: Consumed 4.247s CPU time. Oct 2 20:06:29.525461 systemd-logind[1631]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:06:29.527066 systemd-logind[1631]: Removed session 7. Oct 2 20:06:29.536239 kernel: audit: type=1106 audit(1696277189.518:990): pid=1897 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:29.536444 kernel: audit: type=1104 audit(1696277189.518:991): pid=1897 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:29.518000 audit[1897]: CRED_DISP pid=1897 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:29.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.99:22-139.178.89.65:50434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.543245 kernel: audit: type=1131 audit(1696277189.520:992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.99:22-139.178.89.65:50434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:31.876630 kubelet[2700]: E1002 20:06:31.876598 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:36.878036 kubelet[2700]: E1002 20:06:36.877880 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:39.721805 kubelet[2700]: I1002 20:06:39.721753 2700 kuberuntime_manager.go:1050] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:06:39.722350 env[1643]: time="2023-10-02T20:06:39.722302150Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:06:39.722889 kubelet[2700]: I1002 20:06:39.722852 2700 kubelet_network.go:60] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:06:39.723331 kubelet[2700]: E1002 20:06:39.723296 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:40.448213 kubelet[2700]: I1002 20:06:40.448172 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:40.455849 systemd[1]: Created slice kubepods-besteffort-podff743199_9da6_4856_9054_187de34cd36b.slice. Oct 2 20:06:40.461630 kubelet[2700]: W1002 20:06:40.461599 2700 reflector.go:424] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-30-99" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-99' and this object Oct 2 20:06:40.461918 kubelet[2700]: E1002 20:06:40.461640 2700 reflector.go:140] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-30-99" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-99' and this object Oct 2 20:06:40.463019 kubelet[2700]: I1002 20:06:40.462989 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:40.464011 kubelet[2700]: W1002 20:06:40.463985 2700 reflector.go:424] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-99" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-99' and this object Oct 2 20:06:40.464102 kubelet[2700]: E1002 20:06:40.464020 2700 reflector.go:140] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-30-99" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-30-99' and this object Oct 2 20:06:40.470145 systemd[1]: Created slice kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice. Oct 2 20:06:40.534501 kubelet[2700]: I1002 20:06:40.534467 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ff743199-9da6-4856-9054-187de34cd36b-xtables-lock\") pod \"kube-proxy-blhr4\" (UID: \"ff743199-9da6-4856-9054-187de34cd36b\") " pod="kube-system/kube-proxy-blhr4" Oct 2 20:06:40.534731 kubelet[2700]: I1002 20:06:40.534527 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-c25fg\" (UniqueName: \"kubernetes.io/projected/ff743199-9da6-4856-9054-187de34cd36b-kube-api-access-c25fg\") pod \"kube-proxy-blhr4\" (UID: \"ff743199-9da6-4856-9054-187de34cd36b\") " pod="kube-system/kube-proxy-blhr4" Oct 2 20:06:40.534731 kubelet[2700]: I1002 20:06:40.534576 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-cgroup\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.534731 kubelet[2700]: I1002 20:06:40.534602 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cni-path\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.534731 kubelet[2700]: I1002 20:06:40.534699 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gskpm\" (UniqueName: \"kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-kube-api-access-gskpm\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.534959 kubelet[2700]: I1002 20:06:40.534742 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-net\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.534959 kubelet[2700]: I1002 20:06:40.534770 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hubble-tls\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.534959 kubelet[2700]: I1002 20:06:40.534810 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ff743199-9da6-4856-9054-187de34cd36b-lib-modules\") pod \"kube-proxy-blhr4\" (UID: \"ff743199-9da6-4856-9054-187de34cd36b\") " pod="kube-system/kube-proxy-blhr4" Oct 2 20:06:40.534959 kubelet[2700]: I1002 20:06:40.534841 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-etc-cni-netd\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.534959 kubelet[2700]: I1002 20:06:40.534878 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-run\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.534959 kubelet[2700]: I1002 20:06:40.534911 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/ff743199-9da6-4856-9054-187de34cd36b-kube-proxy\") pod \"kube-proxy-blhr4\" (UID: \"ff743199-9da6-4856-9054-187de34cd36b\") " pod="kube-system/kube-proxy-blhr4" Oct 2 20:06:40.535307 kubelet[2700]: I1002 20:06:40.534943 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-kernel\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.535307 kubelet[2700]: I1002 20:06:40.534978 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-bpf-maps\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.535307 kubelet[2700]: I1002 20:06:40.535010 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-xtables-lock\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.535307 kubelet[2700]: I1002 20:06:40.535047 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-config-path\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.535307 kubelet[2700]: I1002 20:06:40.535081 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/91c5357c-e36c-495c-8aed-645f2cb6b1ff-clustermesh-secrets\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.535307 kubelet[2700]: I1002 20:06:40.535165 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-lib-modules\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.535574 kubelet[2700]: I1002 20:06:40.535203 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hostproc\") pod \"cilium-2l582\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " pod="kube-system/cilium-2l582" Oct 2 20:06:40.709009 kubelet[2700]: I1002 20:06:40.708898 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:06:40.716048 systemd[1]: Created slice kubepods-besteffort-poda1541803_0bba_4426_acd5_88aee8638d56.slice. Oct 2 20:06:40.838066 kubelet[2700]: I1002 20:06:40.838014 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ll78p\" (UniqueName: \"kubernetes.io/projected/a1541803-0bba-4426-acd5-88aee8638d56-kube-api-access-ll78p\") pod \"cilium-operator-69b677f97c-9gkls\" (UID: \"a1541803-0bba-4426-acd5-88aee8638d56\") " pod="kube-system/cilium-operator-69b677f97c-9gkls" Oct 2 20:06:40.838458 kubelet[2700]: I1002 20:06:40.838084 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a1541803-0bba-4426-acd5-88aee8638d56-cilium-config-path\") pod \"cilium-operator-69b677f97c-9gkls\" (UID: \"a1541803-0bba-4426-acd5-88aee8638d56\") " pod="kube-system/cilium-operator-69b677f97c-9gkls" Oct 2 20:06:41.637893 kubelet[2700]: E1002 20:06:41.637846 2700 configmap.go:197] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Oct 2 20:06:41.638095 kubelet[2700]: E1002 20:06:41.637961 2700 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/ff743199-9da6-4856-9054-187de34cd36b-kube-proxy podName:ff743199-9da6-4856-9054-187de34cd36b nodeName:}" failed. No retries permitted until 2023-10-02 20:06:42.137932414 +0000 UTC m=+15.683408899 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/ff743199-9da6-4856-9054-187de34cd36b-kube-proxy") pod "kube-proxy-blhr4" (UID: "ff743199-9da6-4856-9054-187de34cd36b") : failed to sync configmap cache: timed out waiting for the condition Oct 2 20:06:41.879391 kubelet[2700]: E1002 20:06:41.879349 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:41.925664 env[1643]: time="2023-10-02T20:06:41.924611643Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-9gkls,Uid:a1541803-0bba-4426-acd5-88aee8638d56,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:41.951348 env[1643]: time="2023-10-02T20:06:41.951255882Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:41.951721 env[1643]: time="2023-10-02T20:06:41.951353006Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:41.951721 env[1643]: time="2023-10-02T20:06:41.951384410Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:41.958195 env[1643]: time="2023-10-02T20:06:41.951765038Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de pid=2880 runtime=io.containerd.runc.v2 Oct 2 20:06:41.976183 systemd[1]: Started cri-containerd-69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de.scope. Oct 2 20:06:41.986322 env[1643]: time="2023-10-02T20:06:41.981061242Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2l582,Uid:91c5357c-e36c-495c-8aed-645f2cb6b1ff,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:42.038236 kernel: audit: type=1400 audit(1696277202.023:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038399 kernel: audit: type=1400 audit(1696277202.023:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.048528 kernel: audit: type=1400 audit(1696277202.023:995): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.049921 env[1643]: time="2023-10-02T20:06:42.044688813Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:42.049921 env[1643]: time="2023-10-02T20:06:42.044739761Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:42.049921 env[1643]: time="2023-10-02T20:06:42.044756118Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:42.049921 env[1643]: time="2023-10-02T20:06:42.045048935Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916 pid=2915 runtime=io.containerd.runc.v2 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.061241 kernel: audit: type=1400 audit(1696277202.023:996): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.074725 kernel: audit: type=1400 audit(1696277202.023:997): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.074868 kernel: audit: type=1400 audit(1696277202.023:998): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.081361 kernel: audit: type=1400 audit(1696277202.023:999): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.096436 kernel: audit: type=1400 audit(1696277202.023:1000): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.097041 systemd[1]: Started cri-containerd-93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916.scope. Oct 2 20:06:42.115527 kernel: audit: type=1400 audit(1696277202.023:1001): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.133275 kernel: audit: type=1400 audit(1696277202.037:1002): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.037000 audit: BPF prog-id=113 op=LOAD Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2880 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639616363306139356334613934363639346366336465663566383235 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=2880 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639616363306139356334613934363639346366336465663566383235 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit: BPF prog-id=114 op=LOAD Oct 2 20:06:42.038000 audit[2890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000385980 items=0 ppid=2880 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639616363306139356334613934363639346366336465663566383235 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit: BPF prog-id=115 op=LOAD Oct 2 20:06:42.038000 audit[2890]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0003859c8 items=0 ppid=2880 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639616363306139356334613934363639346366336465663566383235 Oct 2 20:06:42.038000 audit: BPF prog-id=115 op=UNLOAD Oct 2 20:06:42.038000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { perfmon } for pid=2890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit[2890]: AVC avc: denied { bpf } for pid=2890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.038000 audit: BPF prog-id=116 op=LOAD Oct 2 20:06:42.038000 audit[2890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000385dd8 items=0 ppid=2880 pid=2890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639616363306139356334613934363639346366336465663566383235 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.141000 audit: BPF prog-id=117 op=LOAD Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2915 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933616633343930363462343931336236383961383364373661323034 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2915 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933616633343930363462343931336236383961383364373661323034 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.142000 audit: BPF prog-id=118 op=LOAD Oct 2 20:06:42.142000 audit[2924]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c0ae0 items=0 ppid=2915 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933616633343930363462343931336236383961383364373661323034 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit: BPF prog-id=119 op=LOAD Oct 2 20:06:42.143000 audit[2924]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c0b28 items=0 ppid=2915 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933616633343930363462343931336236383961383364373661323034 Oct 2 20:06:42.143000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:06:42.143000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { perfmon } for pid=2924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit[2924]: AVC avc: denied { bpf } for pid=2924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.143000 audit: BPF prog-id=120 op=LOAD Oct 2 20:06:42.143000 audit[2924]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c0f38 items=0 ppid=2915 pid=2924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933616633343930363462343931336236383961383364373661323034 Oct 2 20:06:42.166319 env[1643]: time="2023-10-02T20:06:42.166262003Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-9gkls,Uid:a1541803-0bba-4426-acd5-88aee8638d56,Namespace:kube-system,Attempt:0,} returns sandbox id \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\"" Oct 2 20:06:42.174832 env[1643]: time="2023-10-02T20:06:42.174527129Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\"" Oct 2 20:06:42.186903 env[1643]: time="2023-10-02T20:06:42.180200728Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-2l582,Uid:91c5357c-e36c-495c-8aed-645f2cb6b1ff,Namespace:kube-system,Attempt:0,} returns sandbox id \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\"" Oct 2 20:06:42.266510 env[1643]: time="2023-10-02T20:06:42.266466674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-blhr4,Uid:ff743199-9da6-4856-9054-187de34cd36b,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:42.288786 env[1643]: time="2023-10-02T20:06:42.288692816Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:42.289009 env[1643]: time="2023-10-02T20:06:42.288745713Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:42.289009 env[1643]: time="2023-10-02T20:06:42.288761550Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:42.289009 env[1643]: time="2023-10-02T20:06:42.288933342Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/96cc62dc9fb798cc7e454418f376a4c91eaf3d3864f6f01e885e97d05ed52b01 pid=2964 runtime=io.containerd.runc.v2 Oct 2 20:06:42.305894 systemd[1]: Started cri-containerd-96cc62dc9fb798cc7e454418f376a4c91eaf3d3864f6f01e885e97d05ed52b01.scope. Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.330000 audit: BPF prog-id=121 op=LOAD Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2964 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936636336326463396662373938636337653435343431386633373661 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2964 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936636336326463396662373938636337653435343431386633373661 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.332000 audit: BPF prog-id=122 op=LOAD Oct 2 20:06:42.332000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001c8800 items=0 ppid=2964 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936636336326463396662373938636337653435343431386633373661 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit: BPF prog-id=123 op=LOAD Oct 2 20:06:42.334000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001c8848 items=0 ppid=2964 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936636336326463396662373938636337653435343431386633373661 Oct 2 20:06:42.334000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:06:42.334000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { perfmon } for pid=2974 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit[2974]: AVC avc: denied { bpf } for pid=2974 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.334000 audit: BPF prog-id=124 op=LOAD Oct 2 20:06:42.334000 audit[2974]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001c8c58 items=0 ppid=2964 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936636336326463396662373938636337653435343431386633373661 Oct 2 20:06:42.356559 env[1643]: time="2023-10-02T20:06:42.356471271Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-blhr4,Uid:ff743199-9da6-4856-9054-187de34cd36b,Namespace:kube-system,Attempt:0,} returns sandbox id \"96cc62dc9fb798cc7e454418f376a4c91eaf3d3864f6f01e885e97d05ed52b01\"" Oct 2 20:06:42.361957 env[1643]: time="2023-10-02T20:06:42.361912702Z" level=info msg="CreateContainer within sandbox \"96cc62dc9fb798cc7e454418f376a4c91eaf3d3864f6f01e885e97d05ed52b01\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:06:42.381778 env[1643]: time="2023-10-02T20:06:42.381699029Z" level=info msg="CreateContainer within sandbox \"96cc62dc9fb798cc7e454418f376a4c91eaf3d3864f6f01e885e97d05ed52b01\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"bfa4cdc49bc0d53719c1ca969730b478c384894a9f65d525b63bfea0c85dbcea\"" Oct 2 20:06:42.382913 env[1643]: time="2023-10-02T20:06:42.382878753Z" level=info msg="StartContainer for \"bfa4cdc49bc0d53719c1ca969730b478c384894a9f65d525b63bfea0c85dbcea\"" Oct 2 20:06:42.408714 systemd[1]: Started cri-containerd-bfa4cdc49bc0d53719c1ca969730b478c384894a9f65d525b63bfea0c85dbcea.scope. Oct 2 20:06:42.433000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.433000 audit[3005]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2964 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613463646334396263306435333731396331636139363937333062 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.434000 audit: BPF prog-id=125 op=LOAD Oct 2 20:06:42.434000 audit[3005]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000349bc0 items=0 ppid=2964 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.434000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613463646334396263306435333731396331636139363937333062 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit: BPF prog-id=126 op=LOAD Oct 2 20:06:42.435000 audit[3005]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000349c08 items=0 ppid=2964 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613463646334396263306435333731396331636139363937333062 Oct 2 20:06:42.435000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:06:42.435000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { perfmon } for pid=3005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit[3005]: AVC avc: denied { bpf } for pid=3005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:42.435000 audit: BPF prog-id=127 op=LOAD Oct 2 20:06:42.435000 audit[3005]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000349c98 items=0 ppid=2964 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613463646334396263306435333731396331636139363937333062 Oct 2 20:06:42.474911 env[1643]: time="2023-10-02T20:06:42.474853699Z" level=info msg="StartContainer for \"bfa4cdc49bc0d53719c1ca969730b478c384894a9f65d525b63bfea0c85dbcea\" returns successfully" Oct 2 20:06:42.689262 kernel: IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) Oct 2 20:06:42.689435 kernel: IPVS: Connection hash table configured (size=4096, memory=32Kbytes) Oct 2 20:06:42.690566 kernel: IPVS: ipvs loaded. Oct 2 20:06:42.701242 kernel: IPVS: [rr] scheduler registered. Oct 2 20:06:42.711257 kernel: IPVS: [wrr] scheduler registered. Oct 2 20:06:42.720500 kernel: IPVS: [sh] scheduler registered. Oct 2 20:06:42.793000 audit[3062]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.793000 audit[3062]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd5df65d90 a2=0 a3=7ffd5df65d7c items=0 ppid=3014 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.793000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:42.796000 audit[3063]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=3063 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.796000 audit[3063]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd8301380 a2=0 a3=7fffd830136c items=0 ppid=3014 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.796000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:42.798000 audit[3064]: NETFILTER_CFG table=filter:61 family=2 entries=1 op=nft_register_chain pid=3064 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.798000 audit[3064]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd2776f1f0 a2=0 a3=7ffd2776f1dc items=0 ppid=3014 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.798000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:42.799000 audit[3065]: NETFILTER_CFG table=mangle:62 family=10 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.799000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff17504e00 a2=0 a3=7fff17504dec items=0 ppid=3014 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.799000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:42.814000 audit[3066]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=3066 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.814000 audit[3066]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec6da6c80 a2=0 a3=7ffec6da6c6c items=0 ppid=3014 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.814000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:42.816000 audit[3067]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.816000 audit[3067]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff3b9578a0 a2=0 a3=7fff3b95788c items=0 ppid=3014 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.816000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:42.901000 audit[3068]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.901000 audit[3068]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc978d7de0 a2=0 a3=7ffc978d7dcc items=0 ppid=3014 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.901000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:42.905000 audit[3070]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3070 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.905000 audit[3070]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcd5cd1700 a2=0 a3=7ffcd5cd16ec items=0 ppid=3014 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.905000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:06:42.909000 audit[3073]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3073 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.909000 audit[3073]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffcff06c070 a2=0 a3=7ffcff06c05c items=0 ppid=3014 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:06:42.910000 audit[3074]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.910000 audit[3074]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdbb78de10 a2=0 a3=7ffdbb78ddfc items=0 ppid=3014 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.910000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:42.913000 audit[3076]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.913000 audit[3076]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff286cad70 a2=0 a3=7fff286cad5c items=0 ppid=3014 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.913000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:42.914000 audit[3077]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.914000 audit[3077]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe0c779550 a2=0 a3=7ffe0c77953c items=0 ppid=3014 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.914000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:42.917000 audit[3079]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.917000 audit[3079]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe40b590d0 a2=0 a3=7ffe40b590bc items=0 ppid=3014 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.917000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:42.921000 audit[3082]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3082 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.921000 audit[3082]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe6de59400 a2=0 a3=7ffe6de593ec items=0 ppid=3014 pid=3082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:06:42.922000 audit[3083]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.922000 audit[3083]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff24875430 a2=0 a3=7fff2487541c items=0 ppid=3014 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.922000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:42.925000 audit[3085]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3085 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.925000 audit[3085]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeb7584080 a2=0 a3=7ffeb758406c items=0 ppid=3014 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.925000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:42.927000 audit[3086]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.927000 audit[3086]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd543509a0 a2=0 a3=7ffd5435098c items=0 ppid=3014 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.927000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:42.930000 audit[3088]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.930000 audit[3088]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdba8cc5d0 a2=0 a3=7ffdba8cc5bc items=0 ppid=3014 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.930000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:42.934000 audit[3091]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3091 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.934000 audit[3091]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeb4532de0 a2=0 a3=7ffeb4532dcc items=0 ppid=3014 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.934000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:42.938000 audit[3094]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3094 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.938000 audit[3094]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff2c54b2e0 a2=0 a3=7fff2c54b2cc items=0 ppid=3014 pid=3094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.938000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:42.939000 audit[3095]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3095 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.939000 audit[3095]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc7c347cc0 a2=0 a3=7ffc7c347cac items=0 ppid=3014 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.939000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:42.944000 audit[3097]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3097 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.944000 audit[3097]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fffd0d66460 a2=0 a3=7fffd0d6644c items=0 ppid=3014 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.944000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:42.947000 audit[3100]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:42.947000 audit[3100]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe08409180 a2=0 a3=7ffe0840916c items=0 ppid=3014 pid=3100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:42.963000 audit[3104]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:42.963000 audit[3104]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffdb75b2180 a2=0 a3=7ffdb75b216c items=0 ppid=3014 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.963000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:42.971000 audit[3104]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3104 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:42.971000 audit[3104]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffdb75b2180 a2=0 a3=7ffdb75b216c items=0 ppid=3014 pid=3104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.971000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:42.976000 audit[3107]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.976000 audit[3107]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc593152c0 a2=0 a3=7ffc593152ac items=0 ppid=3014 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.976000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:42.979000 audit[3109]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.979000 audit[3109]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff4a186320 a2=0 a3=7fff4a18630c items=0 ppid=3014 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:06:42.984000 audit[3112]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.984000 audit[3112]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff5d2bbd90 a2=0 a3=7fff5d2bbd7c items=0 ppid=3014 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.984000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:06:42.985000 audit[3113]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3113 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.985000 audit[3113]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed0831c80 a2=0 a3=7ffed0831c6c items=0 ppid=3014 pid=3113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.985000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:42.988000 audit[3115]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.988000 audit[3115]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc144c8dc0 a2=0 a3=7ffc144c8dac items=0 ppid=3014 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.988000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:42.989000 audit[3116]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.989000 audit[3116]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffccda3b8a0 a2=0 a3=7ffccda3b88c items=0 ppid=3014 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.989000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:42.992000 audit[3118]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3118 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.992000 audit[3118]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffc76944c0 a2=0 a3=7fffc76944ac items=0 ppid=3014 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.992000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:06:42.996000 audit[3121]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.996000 audit[3121]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe378ea740 a2=0 a3=7ffe378ea72c items=0 ppid=3014 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.996000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:42.997000 audit[3122]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3122 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:42.997000 audit[3122]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe7dab79e0 a2=0 a3=7ffe7dab79cc items=0 ppid=3014 pid=3122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:42.997000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:43.001000 audit[3124]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3124 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.001000 audit[3124]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe3202d5e0 a2=0 a3=7ffe3202d5cc items=0 ppid=3014 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.001000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:43.005000 audit[3125]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3125 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.005000 audit[3125]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd2e26650 a2=0 a3=7fffd2e2663c items=0 ppid=3014 pid=3125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.005000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:43.009000 audit[3127]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.009000 audit[3127]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff9bc74cf0 a2=0 a3=7fff9bc74cdc items=0 ppid=3014 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.009000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:43.015000 audit[3130]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.015000 audit[3130]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc84009200 a2=0 a3=7ffc840091ec items=0 ppid=3014 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.015000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:43.024000 audit[3133]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3133 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.024000 audit[3133]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff9bea3160 a2=0 a3=7fff9bea314c items=0 ppid=3014 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.024000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:06:43.026000 audit[3134]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3134 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.026000 audit[3134]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe22ecd4a0 a2=0 a3=7ffe22ecd48c items=0 ppid=3014 pid=3134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.026000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:43.029000 audit[3136]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3136 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.029000 audit[3136]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc3de72af0 a2=0 a3=7ffc3de72adc items=0 ppid=3014 pid=3136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.029000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:43.033000 audit[3139]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3139 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:43.033000 audit[3139]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd390f5a00 a2=0 a3=7ffd390f59ec items=0 ppid=3014 pid=3139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.033000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:43.039000 audit[3143]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3143 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:43.039000 audit[3143]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd4a4f2300 a2=0 a3=7ffd4a4f22ec items=0 ppid=3014 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.039000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:43.040000 audit[3143]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3143 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:43.040000 audit[3143]: SYSCALL arch=c000003e syscall=46 success=yes exit=1860 a0=3 a1=7ffd4a4f2300 a2=0 a3=7ffd4a4f22ec items=0 ppid=3014 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.040000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:43.475566 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount503858208.mount: Deactivated successfully. Oct 2 20:06:44.503694 env[1643]: time="2023-10-02T20:06:44.503641170Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:44.506487 env[1643]: time="2023-10-02T20:06:44.506298829Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b7eda471b44d1665b27a56412a479c6baff49461eb4cd7e9886be66da63fd36e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:44.509805 env[1643]: time="2023-10-02T20:06:44.509763733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:44.510492 env[1643]: time="2023-10-02T20:06:44.510454835Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\" returns image reference \"sha256:b7eda471b44d1665b27a56412a479c6baff49461eb4cd7e9886be66da63fd36e\"" Oct 2 20:06:44.514100 env[1643]: time="2023-10-02T20:06:44.512928336Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\"" Oct 2 20:06:44.517275 env[1643]: time="2023-10-02T20:06:44.517231103Z" level=info msg="CreateContainer within sandbox \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:06:44.549357 env[1643]: time="2023-10-02T20:06:44.549306158Z" level=info msg="CreateContainer within sandbox \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\"" Oct 2 20:06:44.561686 env[1643]: time="2023-10-02T20:06:44.561626920Z" level=info msg="StartContainer for \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\"" Oct 2 20:06:44.609441 systemd[1]: Started cri-containerd-8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6.scope. Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.657000 audit: BPF prog-id=128 op=LOAD Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2880 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834323030333363313631363931383932356338383765303631316139 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2880 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834323030333363313631363931383932356338383765303631316139 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.658000 audit: BPF prog-id=129 op=LOAD Oct 2 20:06:44.658000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000380d50 items=0 ppid=2880 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.658000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834323030333363313631363931383932356338383765303631316139 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit: BPF prog-id=130 op=LOAD Oct 2 20:06:44.659000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000380d98 items=0 ppid=2880 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834323030333363313631363931383932356338383765303631316139 Oct 2 20:06:44.659000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:06:44.659000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { perfmon } for pid=3152 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit[3152]: AVC avc: denied { bpf } for pid=3152 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:44.659000 audit: BPF prog-id=131 op=LOAD Oct 2 20:06:44.659000 audit[3152]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003811a8 items=0 ppid=2880 pid=3152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.659000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834323030333363313631363931383932356338383765303631316139 Oct 2 20:06:44.696724 env[1643]: time="2023-10-02T20:06:44.696592217Z" level=info msg="StartContainer for \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\" returns successfully" Oct 2 20:06:44.732000 audit[3163]: AVC avc: denied { map_create } for pid=3163 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c542 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c542 tclass=bpf permissive=0 Oct 2 20:06:44.732000 audit[3163]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0005177d0 a2=48 a3=c0005177c0 items=0 ppid=2880 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c542 key=(null) Oct 2 20:06:44.732000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:06:46.886299 kubelet[2700]: E1002 20:06:46.886199 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:51.011842 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount636244788.mount: Deactivated successfully. Oct 2 20:06:51.898438 kubelet[2700]: E1002 20:06:51.898314 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:55.067346 env[1643]: time="2023-10-02T20:06:55.067293793Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:55.076025 env[1643]: time="2023-10-02T20:06:55.075979260Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:526bd4754c9cd45a9602873f814648239ebf8405ea2b401f5e7a3546f7310d88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:55.078799 env[1643]: time="2023-10-02T20:06:55.078699845Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:55.079656 env[1643]: time="2023-10-02T20:06:55.079610455Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\" returns image reference \"sha256:526bd4754c9cd45a9602873f814648239ebf8405ea2b401f5e7a3546f7310d88\"" Oct 2 20:06:55.082486 env[1643]: time="2023-10-02T20:06:55.082442099Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:06:55.103008 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1279016818.mount: Deactivated successfully. Oct 2 20:06:55.112564 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount805313464.mount: Deactivated successfully. Oct 2 20:06:55.117283 env[1643]: time="2023-10-02T20:06:55.117233269Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\"" Oct 2 20:06:55.120163 env[1643]: time="2023-10-02T20:06:55.118541683Z" level=info msg="StartContainer for \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\"" Oct 2 20:06:55.173264 systemd[1]: Started cri-containerd-66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4.scope. Oct 2 20:06:55.184924 systemd[1]: cri-containerd-66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4.scope: Deactivated successfully. Oct 2 20:06:55.297658 env[1643]: time="2023-10-02T20:06:55.297591700Z" level=info msg="shim disconnected" id=66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4 Oct 2 20:06:55.297658 env[1643]: time="2023-10-02T20:06:55.297647504Z" level=warning msg="cleaning up after shim disconnected" id=66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4 namespace=k8s.io Oct 2 20:06:55.297658 env[1643]: time="2023-10-02T20:06:55.297660273Z" level=info msg="cleaning up dead shim" Oct 2 20:06:55.308808 env[1643]: time="2023-10-02T20:06:55.308752990Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:06:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3211 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:06:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:06:55.309430 env[1643]: time="2023-10-02T20:06:55.309311729Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 20:06:55.311389 env[1643]: time="2023-10-02T20:06:55.311326879Z" level=error msg="Failed to pipe stdout of container \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\"" error="reading from a closed fifo" Oct 2 20:06:55.311593 env[1643]: time="2023-10-02T20:06:55.311557440Z" level=error msg="Failed to pipe stderr of container \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\"" error="reading from a closed fifo" Oct 2 20:06:55.316435 env[1643]: time="2023-10-02T20:06:55.316379805Z" level=error msg="StartContainer for \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:06:55.316703 kubelet[2700]: E1002 20:06:55.316676 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4" Oct 2 20:06:55.319757 kubelet[2700]: E1002 20:06:55.316898 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:06:55.319757 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:06:55.319757 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:06:55.319757 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gskpm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:06:55.320103 kubelet[2700]: E1002 20:06:55.316959 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:06:56.084569 env[1643]: time="2023-10-02T20:06:56.084517755Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:06:56.097345 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4-rootfs.mount: Deactivated successfully. Oct 2 20:06:56.127824 env[1643]: time="2023-10-02T20:06:56.127764328Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\"" Oct 2 20:06:56.128957 env[1643]: time="2023-10-02T20:06:56.128918691Z" level=info msg="StartContainer for \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\"" Oct 2 20:06:56.185798 systemd[1]: Started cri-containerd-b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52.scope. Oct 2 20:06:56.203801 systemd[1]: cri-containerd-b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52.scope: Deactivated successfully. Oct 2 20:06:56.220932 env[1643]: time="2023-10-02T20:06:56.220872820Z" level=info msg="shim disconnected" id=b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52 Oct 2 20:06:56.220932 env[1643]: time="2023-10-02T20:06:56.220931773Z" level=warning msg="cleaning up after shim disconnected" id=b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52 namespace=k8s.io Oct 2 20:06:56.221287 env[1643]: time="2023-10-02T20:06:56.220943621Z" level=info msg="cleaning up dead shim" Oct 2 20:06:56.230736 env[1643]: time="2023-10-02T20:06:56.230479952Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:06:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3247 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:06:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:06:56.231234 env[1643]: time="2023-10-02T20:06:56.231152130Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 20:06:56.231568 env[1643]: time="2023-10-02T20:06:56.231525765Z" level=error msg="Failed to pipe stderr of container \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\"" error="reading from a closed fifo" Oct 2 20:06:56.233374 env[1643]: time="2023-10-02T20:06:56.233321668Z" level=error msg="Failed to pipe stdout of container \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\"" error="reading from a closed fifo" Oct 2 20:06:56.235515 env[1643]: time="2023-10-02T20:06:56.235467182Z" level=error msg="StartContainer for \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:06:56.235866 kubelet[2700]: E1002 20:06:56.235834 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52" Oct 2 20:06:56.236058 kubelet[2700]: E1002 20:06:56.236030 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:06:56.236058 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:06:56.236058 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:06:56.236058 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gskpm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:06:56.236855 kubelet[2700]: E1002 20:06:56.236096 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:06:56.899320 kubelet[2700]: E1002 20:06:56.899283 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:06:57.084454 kubelet[2700]: I1002 20:06:57.084355 2700 scope.go:115] "RemoveContainer" containerID="66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4" Oct 2 20:06:57.084681 kubelet[2700]: I1002 20:06:57.084664 2700 scope.go:115] "RemoveContainer" containerID="66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4" Oct 2 20:06:57.086169 env[1643]: time="2023-10-02T20:06:57.086131701Z" level=info msg="RemoveContainer for \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\"" Oct 2 20:06:57.086826 env[1643]: time="2023-10-02T20:06:57.086546346Z" level=info msg="RemoveContainer for \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\"" Oct 2 20:06:57.086936 env[1643]: time="2023-10-02T20:06:57.086903153Z" level=error msg="RemoveContainer for \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\" failed" error="failed to set removing state for container \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\": container is already in removing state" Oct 2 20:06:57.087110 kubelet[2700]: E1002 20:06:57.087081 2700 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\": container is already in removing state" containerID="66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4" Oct 2 20:06:57.087691 kubelet[2700]: E1002 20:06:57.087667 2700 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4": container is already in removing state; Skipping pod "cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)" Oct 2 20:06:57.088259 kubelet[2700]: E1002 20:06:57.088240 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:06:57.098557 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52-rootfs.mount: Deactivated successfully. Oct 2 20:06:57.104594 env[1643]: time="2023-10-02T20:06:57.104549075Z" level=info msg="RemoveContainer for \"66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4\" returns successfully" Oct 2 20:06:58.088745 kubelet[2700]: E1002 20:06:58.088599 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:06:58.404092 kubelet[2700]: W1002 20:06:58.403942 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice/cri-containerd-66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4.scope WatchSource:0}: container "66e30878ec741490b80c9386fdae6659287b25c6c88e05372c07717bec1b20f4" in namespace "k8s.io": not found Oct 2 20:07:01.512942 kubelet[2700]: W1002 20:07:01.512883 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice/cri-containerd-b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52.scope WatchSource:0}: task b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52 not found: not found Oct 2 20:07:01.900952 kubelet[2700]: E1002 20:07:01.900925 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:06.901880 kubelet[2700]: E1002 20:07:06.901747 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:10.963457 env[1643]: time="2023-10-02T20:07:10.963399383Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:07:10.988855 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount854268689.mount: Deactivated successfully. Oct 2 20:07:11.001178 env[1643]: time="2023-10-02T20:07:11.001114196Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\"" Oct 2 20:07:11.002990 env[1643]: time="2023-10-02T20:07:11.002628821Z" level=info msg="StartContainer for \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\"" Oct 2 20:07:11.049966 systemd[1]: run-containerd-runc-k8s.io-1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622-runc.UtH3lO.mount: Deactivated successfully. Oct 2 20:07:11.053707 systemd[1]: Started cri-containerd-1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622.scope. Oct 2 20:07:11.079322 systemd[1]: cri-containerd-1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622.scope: Deactivated successfully. Oct 2 20:07:11.101238 env[1643]: time="2023-10-02T20:07:11.101177095Z" level=info msg="shim disconnected" id=1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622 Oct 2 20:07:11.101586 env[1643]: time="2023-10-02T20:07:11.101568002Z" level=warning msg="cleaning up after shim disconnected" id=1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622 namespace=k8s.io Oct 2 20:07:11.101683 env[1643]: time="2023-10-02T20:07:11.101671208Z" level=info msg="cleaning up dead shim" Oct 2 20:07:11.128251 env[1643]: time="2023-10-02T20:07:11.121576166Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3281 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:11.128251 env[1643]: time="2023-10-02T20:07:11.121892360Z" level=error msg="copy shim log" error="read /proc/self/fd/59: file already closed" Oct 2 20:07:11.128251 env[1643]: time="2023-10-02T20:07:11.124013655Z" level=error msg="Failed to pipe stdout of container \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\"" error="reading from a closed fifo" Oct 2 20:07:11.128251 env[1643]: time="2023-10-02T20:07:11.124102214Z" level=error msg="Failed to pipe stderr of container \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\"" error="reading from a closed fifo" Oct 2 20:07:11.128251 env[1643]: time="2023-10-02T20:07:11.126173636Z" level=error msg="StartContainer for \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:11.128580 kubelet[2700]: E1002 20:07:11.126582 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622" Oct 2 20:07:11.128580 kubelet[2700]: E1002 20:07:11.126747 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:11.128580 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:11.128580 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:07:11.135338 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gskpm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:11.135513 kubelet[2700]: E1002 20:07:11.126808 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:07:11.903429 kubelet[2700]: E1002 20:07:11.903293 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:11.974534 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622-rootfs.mount: Deactivated successfully. Oct 2 20:07:12.123550 kubelet[2700]: I1002 20:07:12.123012 2700 scope.go:115] "RemoveContainer" containerID="b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52" Oct 2 20:07:12.123550 kubelet[2700]: I1002 20:07:12.123353 2700 scope.go:115] "RemoveContainer" containerID="b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52" Oct 2 20:07:12.125039 env[1643]: time="2023-10-02T20:07:12.125001761Z" level=info msg="RemoveContainer for \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\"" Oct 2 20:07:12.125845 env[1643]: time="2023-10-02T20:07:12.125331937Z" level=info msg="RemoveContainer for \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\"" Oct 2 20:07:12.126051 env[1643]: time="2023-10-02T20:07:12.126018197Z" level=error msg="RemoveContainer for \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\" failed" error="failed to set removing state for container \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\": container is already in removing state" Oct 2 20:07:12.126390 kubelet[2700]: E1002 20:07:12.126369 2700 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\": container is already in removing state" containerID="b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52" Oct 2 20:07:12.126522 kubelet[2700]: E1002 20:07:12.126407 2700 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52": container is already in removing state; Skipping pod "cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)" Oct 2 20:07:12.127625 kubelet[2700]: E1002 20:07:12.126914 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:07:12.131585 env[1643]: time="2023-10-02T20:07:12.131496150Z" level=info msg="RemoveContainer for \"b70a4c5973ba4024e3d3da75ba597a88690276bbd31d9e93e4e4316099880f52\" returns successfully" Oct 2 20:07:14.206577 kubelet[2700]: W1002 20:07:14.206530 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice/cri-containerd-1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622.scope WatchSource:0}: task 1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622 not found: not found Oct 2 20:07:16.904668 kubelet[2700]: E1002 20:07:16.904635 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:20.397000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.400319 kernel: kauditd_printk_skb: 396 callbacks suppressed Oct 2 20:07:20.400431 kernel: audit: type=1400 audit(1696277240.397:1117): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.397000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.411687 kernel: audit: type=1400 audit(1696277240.397:1116): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.411812 kernel: audit: type=1300 audit(1696277240.397:1116): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c00139e8a0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:20.397000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c00139e8a0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:20.397000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:20.424968 kernel: audit: type=1327 audit(1696277240.397:1116): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:20.425105 kernel: audit: type=1300 audit(1696277240.397:1117): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00101d840 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:20.397000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00101d840 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:20.397000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:20.438833 kernel: audit: type=1327 audit(1696277240.397:1117): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:21.906307 kubelet[2700]: E1002 20:07:21.906277 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:23.097000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.097000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.110750 kernel: audit: type=1400 audit(1696277243.097:1119): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.110897 kernel: audit: type=1400 audit(1696277243.097:1118): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.111000 kernel: audit: type=1300 audit(1696277243.097:1119): arch=c000003e syscall=254 success=no exit=-13 a0=5a a1=c002acc7c0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:07:23.097000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5a a1=c002acc7c0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:07:23.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:23.118402 kernel: audit: type=1327 audit(1696277243.097:1119): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:23.097000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.097000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c001e954d0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:07:23.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:23.097000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00af9f590 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:07:23.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:23.124000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.124000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c001e95830 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:07:23.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:23.124000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.124000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00af9f5f0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:07:23.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:23.124000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:23.124000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c002f687c0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:07:23.124000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:07:26.907625 kubelet[2700]: E1002 20:07:26.907571 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:26.961609 kubelet[2700]: E1002 20:07:26.961575 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:07:27.543000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.545422 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:07:27.545523 kernel: audit: type=1400 audit(1696277247.543:1124): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.543000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001355200 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:27.560551 kernel: audit: type=1300 audit(1696277247.543:1124): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001355200 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:27.560745 kernel: audit: type=1327 audit(1696277247.543:1124): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:27.543000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:27.545000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.573809 kernel: audit: type=1400 audit(1696277247.545:1125): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.545000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011d87c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:27.581810 kernel: audit: type=1300 audit(1696277247.545:1125): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011d87c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:27.581956 kernel: audit: type=1327 audit(1696277247.545:1125): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:27.545000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:27.548000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.594788 kernel: audit: type=1400 audit(1696277247.548:1126): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.594938 kernel: audit: type=1300 audit(1696277247.548:1126): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011d8920 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:27.548000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011d8920 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:27.548000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:27.608289 kernel: audit: type=1327 audit(1696277247.548:1126): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:27.608432 kernel: audit: type=1400 audit(1696277247.550:1127): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.550000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:27.550000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0011d8a80 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:07:27.550000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:31.548000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.99:22-139.178.89.65:60190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:31.548811 systemd[1]: Started sshd@7-172.31.30.99:22-139.178.89.65:60190.service. Oct 2 20:07:31.751000 audit[3299]: USER_ACCT pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.752280 sshd[3299]: Accepted publickey for core from 139.178.89.65 port 60190 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:31.753000 audit[3299]: CRED_ACQ pid=3299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.753000 audit[3299]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3c77ae70 a2=3 a3=0 items=0 ppid=1 pid=3299 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:31.753000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:31.754341 sshd[3299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:31.761800 systemd[1]: Started session-8.scope. Oct 2 20:07:31.762546 systemd-logind[1631]: New session 8 of user core. Oct 2 20:07:31.768000 audit[3299]: USER_START pid=3299 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.770000 audit[3301]: CRED_ACQ pid=3301 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:31.908888 kubelet[2700]: E1002 20:07:31.908565 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:32.171559 sshd[3299]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:32.173000 audit[3299]: USER_END pid=3299 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.173000 audit[3299]: CRED_DISP pid=3299 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.176603 systemd[1]: sshd@7-172.31.30.99:22-139.178.89.65:60190.service: Deactivated successfully. Oct 2 20:07:32.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.99:22-139.178.89.65:60190 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:32.178390 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:07:32.179367 systemd-logind[1631]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:07:32.181684 systemd-logind[1631]: Removed session 8. Oct 2 20:07:36.910135 kubelet[2700]: E1002 20:07:36.910106 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:41.911587 kubelet[2700]: E1002 20:07:41.911548 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:41.965520 env[1643]: time="2023-10-02T20:07:41.965028042Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:07:41.987748 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1704474626.mount: Deactivated successfully. Oct 2 20:07:42.014837 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2729016125.mount: Deactivated successfully. Oct 2 20:07:42.018803 env[1643]: time="2023-10-02T20:07:42.018747646Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\"" Oct 2 20:07:42.024515 env[1643]: time="2023-10-02T20:07:42.024468650Z" level=info msg="StartContainer for \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\"" Oct 2 20:07:42.075175 systemd[1]: Started cri-containerd-bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913.scope. Oct 2 20:07:42.099011 systemd[1]: cri-containerd-bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913.scope: Deactivated successfully. Oct 2 20:07:42.116848 env[1643]: time="2023-10-02T20:07:42.116789330Z" level=info msg="shim disconnected" id=bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913 Oct 2 20:07:42.116848 env[1643]: time="2023-10-02T20:07:42.116846349Z" level=warning msg="cleaning up after shim disconnected" id=bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913 namespace=k8s.io Oct 2 20:07:42.116848 env[1643]: time="2023-10-02T20:07:42.116955353Z" level=info msg="cleaning up dead shim" Oct 2 20:07:42.127692 env[1643]: time="2023-10-02T20:07:42.127622503Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3337 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:42Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:42.127984 env[1643]: time="2023-10-02T20:07:42.127919799Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 20:07:42.128336 env[1643]: time="2023-10-02T20:07:42.128286581Z" level=error msg="Failed to pipe stdout of container \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\"" error="reading from a closed fifo" Oct 2 20:07:42.128516 env[1643]: time="2023-10-02T20:07:42.128453701Z" level=error msg="Failed to pipe stderr of container \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\"" error="reading from a closed fifo" Oct 2 20:07:42.132155 env[1643]: time="2023-10-02T20:07:42.132104596Z" level=error msg="StartContainer for \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:42.132784 kubelet[2700]: E1002 20:07:42.132709 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913" Oct 2 20:07:42.134146 kubelet[2700]: E1002 20:07:42.133470 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:42.134146 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:42.134146 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:07:42.134146 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gskpm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:42.134646 kubelet[2700]: E1002 20:07:42.133557 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:07:42.189151 kubelet[2700]: I1002 20:07:42.188802 2700 scope.go:115] "RemoveContainer" containerID="1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622" Oct 2 20:07:42.190828 kubelet[2700]: I1002 20:07:42.190802 2700 scope.go:115] "RemoveContainer" containerID="1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622" Oct 2 20:07:42.199992 systemd[1]: Started sshd@8-172.31.30.99:22-139.178.89.65:42934.service. Oct 2 20:07:42.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.99:22-139.178.89.65:42934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.214256 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:07:42.214445 kernel: audit: type=1130 audit(1696277262.199:1137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.99:22-139.178.89.65:42934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.225651 env[1643]: time="2023-10-02T20:07:42.225607687Z" level=info msg="RemoveContainer for \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\"" Oct 2 20:07:42.237200 env[1643]: time="2023-10-02T20:07:42.237152839Z" level=info msg="RemoveContainer for \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\"" Oct 2 20:07:42.237373 env[1643]: time="2023-10-02T20:07:42.237274271Z" level=error msg="RemoveContainer for \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\" failed" error="rpc error: code = NotFound desc = get container info: container \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\" in namespace \"k8s.io\": not found" Oct 2 20:07:42.237706 kubelet[2700]: E1002 20:07:42.237686 2700 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\" in namespace \"k8s.io\": not found" containerID="1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622" Oct 2 20:07:42.238018 kubelet[2700]: E1002 20:07:42.238006 2700 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622" in namespace "k8s.io": not found; Skipping pod "cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)" Oct 2 20:07:42.238490 kubelet[2700]: E1002 20:07:42.238475 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:07:42.242299 env[1643]: time="2023-10-02T20:07:42.242254523Z" level=info msg="RemoveContainer for \"1413f16b0af453c766e80a913fcfd5995b744d7b5814b2477913d49d51402622\" returns successfully" Oct 2 20:07:42.408000 audit[3350]: USER_ACCT pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.418252 kernel: audit: type=1101 audit(1696277262.408:1138): pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.418311 sshd[3350]: Accepted publickey for core from 139.178.89.65 port 42934 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:42.417000 audit[3350]: CRED_ACQ pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.419591 sshd[3350]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:42.431746 kernel: audit: type=1103 audit(1696277262.417:1139): pid=3350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.431868 kernel: audit: type=1006 audit(1696277262.417:1140): pid=3350 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 20:07:42.431900 systemd[1]: Started session-9.scope. Oct 2 20:07:42.417000 audit[3350]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd82254b0 a2=3 a3=0 items=0 ppid=1 pid=3350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:42.442616 kernel: audit: type=1300 audit(1696277262.417:1140): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd82254b0 a2=3 a3=0 items=0 ppid=1 pid=3350 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:42.448040 kernel: audit: type=1327 audit(1696277262.417:1140): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:42.417000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:42.435174 systemd-logind[1631]: New session 9 of user core. Oct 2 20:07:42.448000 audit[3350]: USER_START pid=3350 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.466000 audit[3353]: CRED_ACQ pid=3353 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.474281 kernel: audit: type=1105 audit(1696277262.448:1141): pid=3350 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.474370 kernel: audit: type=1103 audit(1696277262.466:1142): pid=3353 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.675506 sshd[3350]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:42.675000 audit[3350]: USER_END pid=3350 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.684276 kernel: audit: type=1106 audit(1696277262.675:1143): pid=3350 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.677000 audit[3350]: CRED_DISP pid=3350 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.687629 systemd[1]: sshd@8-172.31.30.99:22-139.178.89.65:42934.service: Deactivated successfully. Oct 2 20:07:42.688849 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:07:42.690276 kernel: audit: type=1104 audit(1696277262.677:1144): pid=3350 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:42.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.99:22-139.178.89.65:42934 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.690831 systemd-logind[1631]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:07:42.691773 systemd-logind[1631]: Removed session 9. Oct 2 20:07:42.982336 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913-rootfs.mount: Deactivated successfully. Oct 2 20:07:45.245413 kubelet[2700]: W1002 20:07:45.245367 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice/cri-containerd-bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913.scope WatchSource:0}: task bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913 not found: not found Oct 2 20:07:46.912381 kubelet[2700]: E1002 20:07:46.912323 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:51.914443 kubelet[2700]: E1002 20:07:51.914412 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:07:52.705243 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:52.705399 kernel: audit: type=1130 audit(1696277272.701:1146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.99:22-139.178.89.65:38882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:52.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.99:22-139.178.89.65:38882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:52.702761 systemd[1]: Started sshd@9-172.31.30.99:22-139.178.89.65:38882.service. Oct 2 20:07:52.875000 audit[3365]: USER_ACCT pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.885203 sshd[3365]: Accepted publickey for core from 139.178.89.65 port 38882 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:52.885457 kernel: audit: type=1101 audit(1696277272.875:1147): pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.891000 audit[3365]: CRED_ACQ pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.893171 sshd[3365]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:52.906360 systemd[1]: Started session-10.scope. Oct 2 20:07:52.906955 kernel: audit: type=1103 audit(1696277272.891:1148): pid=3365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.907009 kernel: audit: type=1006 audit(1696277272.891:1149): pid=3365 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:07:52.907043 kernel: audit: type=1300 audit(1696277272.891:1149): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4b351e90 a2=3 a3=0 items=0 ppid=1 pid=3365 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:52.891000 audit[3365]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4b351e90 a2=3 a3=0 items=0 ppid=1 pid=3365 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:52.909190 systemd-logind[1631]: New session 10 of user core. Oct 2 20:07:52.891000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:52.916919 kernel: audit: type=1327 audit(1696277272.891:1149): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:52.916000 audit[3365]: USER_START pid=3365 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.928162 kernel: audit: type=1105 audit(1696277272.916:1150): pid=3365 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.928533 kernel: audit: type=1103 audit(1696277272.926:1151): pid=3367 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:52.926000 audit[3367]: CRED_ACQ pid=3367 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.119865 sshd[3365]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:53.120000 audit[3365]: USER_END pid=3365 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.136102 kernel: audit: type=1106 audit(1696277273.120:1152): pid=3365 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.136311 kernel: audit: type=1104 audit(1696277273.121:1153): pid=3365 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.121000 audit[3365]: CRED_DISP pid=3365 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.130409 systemd-logind[1631]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:07:53.133129 systemd[1]: sshd@9-172.31.30.99:22-139.178.89.65:38882.service: Deactivated successfully. Oct 2 20:07:53.134436 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:07:53.136598 systemd-logind[1631]: Removed session 10. Oct 2 20:07:53.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.99:22-139.178.89.65:38882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:55.957324 kubelet[2700]: E1002 20:07:55.956886 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:07:56.915575 kubelet[2700]: E1002 20:07:56.915537 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:01.916293 kubelet[2700]: E1002 20:08:01.916251 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:03.146041 systemd[1]: Started sshd@10-172.31.30.99:22-139.178.89.65:35628.service. Oct 2 20:08:03.153663 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:03.153794 kernel: audit: type=1130 audit(1696277283.145:1155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.99:22-139.178.89.65:35628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:03.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.99:22-139.178.89.65:35628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:03.309000 audit[3377]: USER_ACCT pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.316318 sshd[3377]: Accepted publickey for core from 139.178.89.65 port 35628 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:03.320068 kernel: audit: type=1101 audit(1696277283.309:1156): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.319000 audit[3377]: CRED_ACQ pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.321282 sshd[3377]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:03.342710 kernel: audit: type=1103 audit(1696277283.319:1157): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.342840 kernel: audit: type=1006 audit(1696277283.319:1158): pid=3377 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:08:03.343246 systemd[1]: Started session-11.scope. Oct 2 20:08:03.319000 audit[3377]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd71f7f400 a2=3 a3=0 items=0 ppid=1 pid=3377 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:03.343600 systemd-logind[1631]: New session 11 of user core. Oct 2 20:08:03.319000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:03.354466 kernel: audit: type=1300 audit(1696277283.319:1158): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd71f7f400 a2=3 a3=0 items=0 ppid=1 pid=3377 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:03.354595 kernel: audit: type=1327 audit(1696277283.319:1158): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:03.354000 audit[3377]: USER_START pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.367265 kernel: audit: type=1105 audit(1696277283.354:1159): pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.371426 kernel: audit: type=1103 audit(1696277283.357:1160): pid=3379 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.357000 audit[3379]: CRED_ACQ pid=3379 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.589736 sshd[3377]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:03.590000 audit[3377]: USER_END pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.605138 kernel: audit: type=1106 audit(1696277283.590:1161): pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.605322 kernel: audit: type=1104 audit(1696277283.590:1162): pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.590000 audit[3377]: CRED_DISP pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.600313 systemd-logind[1631]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:08:03.602278 systemd[1]: sshd@10-172.31.30.99:22-139.178.89.65:35628.service: Deactivated successfully. Oct 2 20:08:03.603305 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:08:03.605110 systemd-logind[1631]: Removed session 11. Oct 2 20:08:03.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.99:22-139.178.89.65:35628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:06.917560 kubelet[2700]: E1002 20:08:06.917529 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:09.961306 kubelet[2700]: E1002 20:08:09.961271 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:08:11.918799 kubelet[2700]: E1002 20:08:11.918767 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:13.624246 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:13.624426 kernel: audit: type=1130 audit(1696277293.618:1164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.99:22-139.178.89.65:57302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:13.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.99:22-139.178.89.65:57302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:13.618925 systemd[1]: Started sshd@11-172.31.30.99:22-139.178.89.65:57302.service. Oct 2 20:08:13.798000 audit[3391]: USER_ACCT pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.812179 kernel: audit: type=1101 audit(1696277293.798:1165): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.812274 sshd[3391]: Accepted publickey for core from 139.178.89.65 port 57302 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:13.812000 audit[3391]: CRED_ACQ pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.814706 sshd[3391]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:13.826516 kernel: audit: type=1103 audit(1696277293.812:1166): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.826637 kernel: audit: type=1006 audit(1696277293.812:1167): pid=3391 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:08:13.812000 audit[3391]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4c333eb0 a2=3 a3=0 items=0 ppid=1 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:13.840004 kernel: audit: type=1300 audit(1696277293.812:1167): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe4c333eb0 a2=3 a3=0 items=0 ppid=1 pid=3391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:13.840124 kernel: audit: type=1327 audit(1696277293.812:1167): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:13.812000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:13.838403 systemd[1]: Started session-12.scope. Oct 2 20:08:13.840033 systemd-logind[1631]: New session 12 of user core. Oct 2 20:08:13.856453 kernel: audit: type=1105 audit(1696277293.847:1168): pid=3391 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.847000 audit[3391]: USER_START pid=3391 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.855000 audit[3393]: CRED_ACQ pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:13.865408 kernel: audit: type=1103 audit(1696277293.855:1169): pid=3393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.056756 sshd[3391]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:14.057000 audit[3391]: USER_END pid=3391 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.058000 audit[3391]: CRED_DISP pid=3391 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.077803 systemd[1]: sshd@11-172.31.30.99:22-139.178.89.65:57302.service: Deactivated successfully. Oct 2 20:08:14.078808 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:08:14.085348 kernel: audit: type=1106 audit(1696277294.057:1170): pid=3391 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.085429 kernel: audit: type=1104 audit(1696277294.058:1171): pid=3391 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.076000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.99:22-139.178.89.65:57302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:14.083948 systemd-logind[1631]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:08:14.086112 systemd-logind[1631]: Removed session 12. Oct 2 20:08:16.920305 kubelet[2700]: E1002 20:08:16.920273 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:20.399000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:20.402577 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:20.402734 kernel: audit: type=1400 audit(1696277300.399:1173): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:20.399000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000ef7ae0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:20.432231 kernel: audit: type=1300 audit(1696277300.399:1173): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000ef7ae0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:20.432466 kernel: audit: type=1327 audit(1696277300.399:1173): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:20.399000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:20.400000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:20.453988 kernel: audit: type=1400 audit(1696277300.400:1174): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:20.454110 kernel: audit: type=1300 audit(1696277300.400:1174): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0010d3cb0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:20.400000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0010d3cb0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:20.400000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:20.471668 kernel: audit: type=1327 audit(1696277300.400:1174): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:21.921868 kubelet[2700]: E1002 20:08:21.921836 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:22.961553 env[1643]: time="2023-10-02T20:08:22.961508129Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:08:22.985492 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount542315618.mount: Deactivated successfully. Oct 2 20:08:22.990520 env[1643]: time="2023-10-02T20:08:22.990443925Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\"" Oct 2 20:08:22.991661 env[1643]: time="2023-10-02T20:08:22.991608372Z" level=info msg="StartContainer for \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\"" Oct 2 20:08:23.053850 systemd[1]: Started cri-containerd-a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08.scope. Oct 2 20:08:23.084277 systemd[1]: cri-containerd-a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08.scope: Deactivated successfully. Oct 2 20:08:23.100000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.100000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c007ee4420 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:08:23.122200 kernel: audit: type=1400 audit(1696277303.100:1175): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.122443 kernel: audit: type=1300 audit(1696277303.100:1175): arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c007ee4420 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:08:23.122495 kernel: audit: type=1327 audit(1696277303.100:1175): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:23.100000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:23.100000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.142580 kernel: audit: type=1400 audit(1696277303.100:1176): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.100000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0028d8280 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:08:23.100000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:23.102000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.102000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00792ef00 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:08:23.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:23.125000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.125000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0028b5c80 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:08:23.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:23.125000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.125000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00792f020 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:08:23.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:23.125000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:23.125000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c007ee46f0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:08:23.125000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:08:23.151297 env[1643]: time="2023-10-02T20:08:23.144862427Z" level=info msg="shim disconnected" id=a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08 Oct 2 20:08:23.151297 env[1643]: time="2023-10-02T20:08:23.144924208Z" level=warning msg="cleaning up after shim disconnected" id=a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08 namespace=k8s.io Oct 2 20:08:23.151297 env[1643]: time="2023-10-02T20:08:23.144938490Z" level=info msg="cleaning up dead shim" Oct 2 20:08:23.167334 env[1643]: time="2023-10-02T20:08:23.167246773Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3427 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:23Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:23.167636 env[1643]: time="2023-10-02T20:08:23.167571302Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 20:08:23.168468 env[1643]: time="2023-10-02T20:08:23.168417975Z" level=error msg="Failed to pipe stderr of container \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\"" error="reading from a closed fifo" Oct 2 20:08:23.168592 env[1643]: time="2023-10-02T20:08:23.168429127Z" level=error msg="Failed to pipe stdout of container \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\"" error="reading from a closed fifo" Oct 2 20:08:23.170581 env[1643]: time="2023-10-02T20:08:23.170528183Z" level=error msg="StartContainer for \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:23.170835 kubelet[2700]: E1002 20:08:23.170813 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08" Oct 2 20:08:23.171300 kubelet[2700]: E1002 20:08:23.170946 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:23.171300 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:23.171300 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:08:23.171300 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gskpm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:23.172344 kubelet[2700]: E1002 20:08:23.170995 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:08:23.283835 kubelet[2700]: I1002 20:08:23.281985 2700 scope.go:115] "RemoveContainer" containerID="bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913" Oct 2 20:08:23.283835 kubelet[2700]: I1002 20:08:23.282442 2700 scope.go:115] "RemoveContainer" containerID="bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913" Oct 2 20:08:23.285403 env[1643]: time="2023-10-02T20:08:23.285368434Z" level=info msg="RemoveContainer for \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\"" Oct 2 20:08:23.287002 env[1643]: time="2023-10-02T20:08:23.286970806Z" level=info msg="RemoveContainer for \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\"" Oct 2 20:08:23.287573 env[1643]: time="2023-10-02T20:08:23.287536397Z" level=error msg="RemoveContainer for \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\" failed" error="failed to set removing state for container \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\": container is already in removing state" Oct 2 20:08:23.287884 kubelet[2700]: E1002 20:08:23.287818 2700 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\": container is already in removing state" containerID="bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913" Oct 2 20:08:23.287884 kubelet[2700]: I1002 20:08:23.287860 2700 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913} err="rpc error: code = Unknown desc = failed to set removing state for container \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\": container is already in removing state" Oct 2 20:08:23.293250 env[1643]: time="2023-10-02T20:08:23.293176546Z" level=info msg="RemoveContainer for \"bff97d058cf0caac892b329481bf5a30ffeb5d15b173a72308bb3b8308777913\" returns successfully" Oct 2 20:08:23.294252 kubelet[2700]: E1002 20:08:23.294060 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:08:23.974461 systemd[1]: run-containerd-runc-k8s.io-a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08-runc.bCPuOq.mount: Deactivated successfully. Oct 2 20:08:23.974596 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08-rootfs.mount: Deactivated successfully. Oct 2 20:08:24.082091 systemd[1]: Started sshd@12-172.31.30.99:22-139.178.89.65:38418.service. Oct 2 20:08:24.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.99:22-139.178.89.65:38418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:24.271000 audit[3441]: USER_ACCT pid=3441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.273025 sshd[3441]: Accepted publickey for core from 139.178.89.65 port 38418 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:24.272000 audit[3441]: CRED_ACQ pid=3441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.272000 audit[3441]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc883a0230 a2=3 a3=0 items=0 ppid=1 pid=3441 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:24.272000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:24.274439 sshd[3441]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:24.280428 systemd[1]: Started session-13.scope. Oct 2 20:08:24.280926 systemd-logind[1631]: New session 13 of user core. Oct 2 20:08:24.287000 audit[3441]: USER_START pid=3441 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.289000 audit[3443]: CRED_ACQ pid=3443 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.498623 sshd[3441]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:24.499000 audit[3441]: USER_END pid=3441 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.499000 audit[3441]: CRED_DISP pid=3441 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.503723 systemd[1]: sshd@12-172.31.30.99:22-139.178.89.65:38418.service: Deactivated successfully. Oct 2 20:08:24.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.99:22-139.178.89.65:38418 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:24.505777 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:08:24.507167 systemd-logind[1631]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:08:24.509129 systemd-logind[1631]: Removed session 13. Oct 2 20:08:26.237989 kubelet[2700]: W1002 20:08:26.237945 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice/cri-containerd-a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08.scope WatchSource:0}: task a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08 not found: not found Oct 2 20:08:26.923097 kubelet[2700]: E1002 20:08:26.923069 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:27.543000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.547953 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:08:27.548395 kernel: audit: type=1400 audit(1696277307.543:1190): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.543000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000d608c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:27.581546 kernel: audit: type=1300 audit(1696277307.543:1190): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000d608c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:27.588499 kernel: audit: type=1327 audit(1696277307.543:1190): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:27.543000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:27.594824 kernel: audit: type=1400 audit(1696277307.543:1191): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.543000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.543000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8b740 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:27.543000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:27.610503 kernel: audit: type=1300 audit(1696277307.543:1191): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8b740 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:27.610643 kernel: audit: type=1327 audit(1696277307.543:1191): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:27.610686 kernel: audit: type=1400 audit(1696277307.546:1192): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.546000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.546000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8b780 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:27.626904 kernel: audit: type=1300 audit(1696277307.546:1192): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8b780 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:27.627023 kernel: audit: type=1327 audit(1696277307.546:1192): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:27.546000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:27.552000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.639249 kernel: audit: type=1400 audit(1696277307.552:1193): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:27.552000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000c8b7c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:08:27.552000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:31.925337 kubelet[2700]: E1002 20:08:31.924466 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:34.528397 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:08:34.528532 kernel: audit: type=1130 audit(1696277314.525:1194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.99:22-139.178.89.65:36824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:34.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.99:22-139.178.89.65:36824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:34.526217 systemd[1]: Started sshd@13-172.31.30.99:22-139.178.89.65:36824.service. Oct 2 20:08:34.700000 audit[3456]: USER_ACCT pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.701928 sshd[3456]: Accepted publickey for core from 139.178.89.65 port 36824 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:34.711886 kernel: audit: type=1101 audit(1696277314.700:1195): pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.711000 audit[3456]: CRED_ACQ pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.713008 sshd[3456]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:34.726951 kernel: audit: type=1103 audit(1696277314.711:1196): pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.727073 kernel: audit: type=1006 audit(1696277314.711:1197): pid=3456 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:08:34.727180 kernel: audit: type=1300 audit(1696277314.711:1197): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7e8eb440 a2=3 a3=0 items=0 ppid=1 pid=3456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:34.711000 audit[3456]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7e8eb440 a2=3 a3=0 items=0 ppid=1 pid=3456 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:34.725338 systemd[1]: Started session-14.scope. Oct 2 20:08:34.729010 systemd-logind[1631]: New session 14 of user core. Oct 2 20:08:34.711000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:34.742920 kernel: audit: type=1327 audit(1696277314.711:1197): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:34.743000 audit[3456]: USER_START pid=3456 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.745000 audit[3458]: CRED_ACQ pid=3458 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.757575 kernel: audit: type=1105 audit(1696277314.743:1198): pid=3456 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.757666 kernel: audit: type=1103 audit(1696277314.745:1199): pid=3458 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.954025 sshd[3456]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:34.954000 audit[3456]: USER_END pid=3456 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.964185 kubelet[2700]: E1002 20:08:34.958996 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:08:34.964546 kernel: audit: type=1106 audit(1696277314.954:1200): pid=3456 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.954000 audit[3456]: CRED_DISP pid=3456 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.972932 kernel: audit: type=1104 audit(1696277314.954:1201): pid=3456 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:34.973018 systemd[1]: sshd@13-172.31.30.99:22-139.178.89.65:36824.service: Deactivated successfully. Oct 2 20:08:34.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.99:22-139.178.89.65:36824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:34.974208 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:08:34.976206 systemd-logind[1631]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:08:34.977852 systemd-logind[1631]: Removed session 14. Oct 2 20:08:36.925868 kubelet[2700]: E1002 20:08:36.925764 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:41.926747 kubelet[2700]: E1002 20:08:41.926716 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:44.984417 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:44.984552 kernel: audit: type=1130 audit(1696277324.982:1203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.99:22-139.178.89.65:47780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:44.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.99:22-139.178.89.65:47780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:44.981961 systemd[1]: Started sshd@14-172.31.30.99:22-139.178.89.65:47780.service. Oct 2 20:08:45.157000 audit[3471]: USER_ACCT pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.157805 sshd[3471]: Accepted publickey for core from 139.178.89.65 port 47780 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:45.164250 kernel: audit: type=1101 audit(1696277325.157:1204): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.164000 audit[3471]: CRED_ACQ pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.165713 sshd[3471]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:45.174780 systemd[1]: Started session-15.scope. Oct 2 20:08:45.178086 kernel: audit: type=1103 audit(1696277325.164:1205): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.178204 kernel: audit: type=1006 audit(1696277325.164:1206): pid=3471 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:08:45.178356 kernel: audit: type=1300 audit(1696277325.164:1206): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcdd46210 a2=3 a3=0 items=0 ppid=1 pid=3471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:45.164000 audit[3471]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcdd46210 a2=3 a3=0 items=0 ppid=1 pid=3471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:45.178563 systemd-logind[1631]: New session 15 of user core. Oct 2 20:08:45.164000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:45.186000 audit[3471]: USER_START pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.198021 kernel: audit: type=1327 audit(1696277325.164:1206): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:45.198167 kernel: audit: type=1105 audit(1696277325.186:1207): pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.198206 kernel: audit: type=1103 audit(1696277325.190:1208): pid=3473 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.190000 audit[3473]: CRED_ACQ pid=3473 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.409295 sshd[3471]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:45.410000 audit[3471]: USER_END pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.410000 audit[3471]: CRED_DISP pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.419753 systemd[1]: sshd@14-172.31.30.99:22-139.178.89.65:47780.service: Deactivated successfully. Oct 2 20:08:45.420773 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:08:45.422961 systemd-logind[1631]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:08:45.424164 kernel: audit: type=1106 audit(1696277325.410:1209): pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.424385 kernel: audit: type=1104 audit(1696277325.410:1210): pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.99:22-139.178.89.65:47780 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:45.424771 systemd-logind[1631]: Removed session 15. Oct 2 20:08:46.927416 kubelet[2700]: E1002 20:08:46.927376 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:47.956908 kubelet[2700]: E1002 20:08:47.956875 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:08:51.928285 kubelet[2700]: E1002 20:08:51.928251 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:55.436610 systemd[1]: Started sshd@15-172.31.30.99:22-139.178.89.65:57648.service. Oct 2 20:08:55.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.99:22-139.178.89.65:57648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:55.439054 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:55.439142 kernel: audit: type=1130 audit(1696277335.436:1212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.99:22-139.178.89.65:57648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:55.631000 audit[3483]: USER_ACCT pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.639069 sshd[3483]: Accepted publickey for core from 139.178.89.65 port 57648 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:55.639435 kernel: audit: type=1101 audit(1696277335.631:1213): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.638000 audit[3483]: CRED_ACQ pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.639835 sshd[3483]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:55.651276 kernel: audit: type=1103 audit(1696277335.638:1214): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.638000 audit[3483]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb6aece10 a2=3 a3=0 items=0 ppid=1 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:55.681872 kernel: audit: type=1006 audit(1696277335.638:1215): pid=3483 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:08:55.681990 kernel: audit: type=1300 audit(1696277335.638:1215): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb6aece10 a2=3 a3=0 items=0 ppid=1 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:55.682023 kernel: audit: type=1327 audit(1696277335.638:1215): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:55.638000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:55.681298 systemd-logind[1631]: New session 16 of user core. Oct 2 20:08:55.683373 systemd[1]: Started session-16.scope. Oct 2 20:08:55.693000 audit[3483]: USER_START pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.704157 kernel: audit: type=1105 audit(1696277335.693:1216): pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.704321 kernel: audit: type=1103 audit(1696277335.703:1217): pid=3485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.703000 audit[3485]: CRED_ACQ pid=3485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.890420 sshd[3483]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:55.891000 audit[3483]: USER_END pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.891000 audit[3483]: CRED_DISP pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.901105 systemd[1]: sshd@15-172.31.30.99:22-139.178.89.65:57648.service: Deactivated successfully. Oct 2 20:08:55.902170 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:08:55.904002 systemd-logind[1631]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:08:55.905346 kernel: audit: type=1106 audit(1696277335.891:1218): pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.905511 kernel: audit: type=1104 audit(1696277335.891:1219): pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:55.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.99:22-139.178.89.65:57648 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:55.906334 systemd-logind[1631]: Removed session 16. Oct 2 20:08:56.929027 kubelet[2700]: E1002 20:08:56.928991 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:58.957030 kubelet[2700]: E1002 20:08:58.956991 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:09:01.929937 kubelet[2700]: E1002 20:09:01.929898 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:05.921245 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:05.921378 kernel: audit: type=1130 audit(1696277345.918:1221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.99:22-139.178.89.65:52058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:05.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.99:22-139.178.89.65:52058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:05.918323 systemd[1]: Started sshd@16-172.31.30.99:22-139.178.89.65:52058.service. Oct 2 20:09:06.087000 audit[3496]: USER_ACCT pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.087866 sshd[3496]: Accepted publickey for core from 139.178.89.65 port 52058 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:06.095451 kernel: audit: type=1101 audit(1696277346.087:1222): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.095000 audit[3496]: CRED_ACQ pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.095945 sshd[3496]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:06.105549 systemd[1]: Started session-17.scope. Oct 2 20:09:06.107470 kernel: audit: type=1103 audit(1696277346.095:1223): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.107546 kernel: audit: type=1006 audit(1696277346.095:1224): pid=3496 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:09:06.107407 systemd-logind[1631]: New session 17 of user core. Oct 2 20:09:06.095000 audit[3496]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6a2d7ae0 a2=3 a3=0 items=0 ppid=1 pid=3496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.115689 kernel: audit: type=1300 audit(1696277346.095:1224): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6a2d7ae0 a2=3 a3=0 items=0 ppid=1 pid=3496 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.115782 kernel: audit: type=1327 audit(1696277346.095:1224): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.095000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.117804 kernel: audit: type=1105 audit(1696277346.116:1225): pid=3496 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.116000 audit[3496]: USER_START pid=3496 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.118000 audit[3498]: CRED_ACQ pid=3498 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.129147 kernel: audit: type=1103 audit(1696277346.118:1226): pid=3498 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.355858 sshd[3496]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:06.357000 audit[3496]: USER_END pid=3496 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.368299 kernel: audit: type=1106 audit(1696277346.357:1227): pid=3496 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.369201 systemd[1]: sshd@16-172.31.30.99:22-139.178.89.65:52058.service: Deactivated successfully. Oct 2 20:09:06.370633 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:09:06.372298 systemd-logind[1631]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:09:06.358000 audit[3496]: CRED_DISP pid=3496 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.381418 kernel: audit: type=1104 audit(1696277346.358:1228): pid=3496 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.369000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.99:22-139.178.89.65:52058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.389486 systemd-logind[1631]: Removed session 17. Oct 2 20:09:06.393295 systemd[1]: Started sshd@17-172.31.30.99:22-139.178.89.65:52062.service. Oct 2 20:09:06.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.99:22-139.178.89.65:52062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.563000 audit[3508]: USER_ACCT pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.564759 sshd[3508]: Accepted publickey for core from 139.178.89.65 port 52062 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:06.567000 audit[3508]: CRED_ACQ pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.567000 audit[3508]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfac0e8f0 a2=3 a3=0 items=0 ppid=1 pid=3508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.567000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.568569 sshd[3508]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:06.579497 systemd[1]: Started session-18.scope. Oct 2 20:09:06.580173 systemd-logind[1631]: New session 18 of user core. Oct 2 20:09:06.590000 audit[3508]: USER_START pid=3508 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.592000 audit[3510]: CRED_ACQ pid=3510 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.931198 kubelet[2700]: E1002 20:09:06.931174 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:07.928436 sshd[3508]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:07.932000 audit[3508]: USER_END pid=3508 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.933000 audit[3508]: CRED_DISP pid=3508 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.937282 systemd[1]: sshd@17-172.31.30.99:22-139.178.89.65:52062.service: Deactivated successfully. Oct 2 20:09:07.939890 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:09:07.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.99:22-139.178.89.65:52062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:07.941056 systemd-logind[1631]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:09:07.944002 systemd-logind[1631]: Removed session 18. Oct 2 20:09:07.960008 systemd[1]: Started sshd@18-172.31.30.99:22-139.178.89.65:52066.service. Oct 2 20:09:07.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.99:22-139.178.89.65:52066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:08.154000 audit[3518]: USER_ACCT pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.157167 sshd[3518]: Accepted publickey for core from 139.178.89.65 port 52066 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:08.157000 audit[3518]: CRED_ACQ pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.157000 audit[3518]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe04a027e0 a2=3 a3=0 items=0 ppid=1 pid=3518 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:08.157000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:08.158013 sshd[3518]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:08.170922 systemd-logind[1631]: New session 19 of user core. Oct 2 20:09:08.171336 systemd[1]: Started session-19.scope. Oct 2 20:09:08.177000 audit[3518]: USER_START pid=3518 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.179000 audit[3520]: CRED_ACQ pid=3520 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.376338 sshd[3518]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:08.377000 audit[3518]: USER_END pid=3518 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.377000 audit[3518]: CRED_DISP pid=3518 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.380770 systemd[1]: sshd@18-172.31.30.99:22-139.178.89.65:52066.service: Deactivated successfully. Oct 2 20:09:08.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.99:22-139.178.89.65:52066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:08.381753 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:09:08.382314 systemd-logind[1631]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:09:08.383271 systemd-logind[1631]: Removed session 19. Oct 2 20:09:11.932955 kubelet[2700]: E1002 20:09:11.932921 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:11.957124 kubelet[2700]: E1002 20:09:11.957091 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:09:16.934575 kubelet[2700]: E1002 20:09:16.934535 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:18.406245 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:09:18.406384 kernel: audit: type=1130 audit(1696277358.403:1248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.99:22-139.178.89.65:40746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:18.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.99:22-139.178.89.65:40746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:18.403468 systemd[1]: Started sshd@19-172.31.30.99:22-139.178.89.65:40746.service. Oct 2 20:09:18.577106 kernel: audit: type=1101 audit(1696277358.569:1249): pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.577256 kernel: audit: type=1103 audit(1696277358.575:1250): pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.569000 audit[3532]: USER_ACCT pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.575000 audit[3532]: CRED_ACQ pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.576579 sshd[3532]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:18.578322 sshd[3532]: Accepted publickey for core from 139.178.89.65 port 40746 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:18.587244 kernel: audit: type=1006 audit(1696277358.575:1251): pid=3532 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:09:18.585509 systemd[1]: Started session-20.scope. Oct 2 20:09:18.587288 systemd-logind[1631]: New session 20 of user core. Oct 2 20:09:18.575000 audit[3532]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6d62ce30 a2=3 a3=0 items=0 ppid=1 pid=3532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:18.595254 kernel: audit: type=1300 audit(1696277358.575:1251): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6d62ce30 a2=3 a3=0 items=0 ppid=1 pid=3532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:18.575000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:18.593000 audit[3532]: USER_START pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.605892 kernel: audit: type=1327 audit(1696277358.575:1251): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:18.606017 kernel: audit: type=1105 audit(1696277358.593:1252): pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.606052 kernel: audit: type=1103 audit(1696277358.597:1253): pid=3534 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.597000 audit[3534]: CRED_ACQ pid=3534 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.795591 sshd[3532]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:18.797000 audit[3532]: USER_END pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.801395 systemd[1]: sshd@19-172.31.30.99:22-139.178.89.65:40746.service: Deactivated successfully. Oct 2 20:09:18.802376 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:09:18.804195 systemd-logind[1631]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:09:18.805974 systemd-logind[1631]: Removed session 20. Oct 2 20:09:18.798000 audit[3532]: CRED_DISP pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.811924 kernel: audit: type=1106 audit(1696277358.797:1254): pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.812100 kernel: audit: type=1104 audit(1696277358.798:1255): pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:18.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.99:22-139.178.89.65:40746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:20.401000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:20.401000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001e4e840 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:20.401000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:20.401000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:20.401000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c002650f40 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:20.401000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:21.936558 kubelet[2700]: E1002 20:09:21.936527 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:23.102000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:23.102000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:23.102000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c011535140 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:09:23.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:23.102000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0114c7dc0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:09:23.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:23.103000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:23.103000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c011535260 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:09:23.103000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:23.127000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:23.127000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:23.127000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c0115352f0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:09:23.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:23.127000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:23.127000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c01150b940 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:09:23.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:23.127000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c011584150 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:09:23.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:09:24.957883 kubelet[2700]: E1002 20:09:24.957614 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:09:26.938130 kubelet[2700]: E1002 20:09:26.938099 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:27.545000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.546532 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:09:27.546642 kernel: audit: type=1400 audit(1696277367.545:1265): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.545000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0024d7dc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:27.567921 kernel: audit: type=1300 audit(1696277367.545:1265): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0024d7dc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:27.569198 kernel: audit: type=1327 audit(1696277367.545:1265): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:27.545000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:27.547000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.547000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002651d00 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:27.592854 kernel: audit: type=1400 audit(1696277367.547:1266): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.592971 kernel: audit: type=1300 audit(1696277367.547:1266): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002651d00 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:27.593001 kernel: audit: type=1327 audit(1696277367.547:1266): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:27.547000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:27.554000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.604928 kernel: audit: type=1400 audit(1696277367.554:1267): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.605070 kernel: audit: type=1300 audit(1696277367.554:1267): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002651e40 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:27.554000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002651e40 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:27.554000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:27.617973 kernel: audit: type=1327 audit(1696277367.554:1267): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:27.618103 kernel: audit: type=1400 audit(1696277367.565:1268): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.565000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:27.565000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0024d7e00 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:09:27.565000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:28.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.99:22-139.178.89.65:47054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:28.821694 systemd[1]: Started sshd@20-172.31.30.99:22-139.178.89.65:47054.service. Oct 2 20:09:28.992000 audit[3546]: USER_ACCT pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.993578 sshd[3546]: Accepted publickey for core from 139.178.89.65 port 47054 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:28.995000 audit[3546]: CRED_ACQ pid=3546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:28.995000 audit[3546]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce1877c50 a2=3 a3=0 items=0 ppid=1 pid=3546 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:28.995000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:28.996792 sshd[3546]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:29.018171 systemd[1]: Started session-21.scope. Oct 2 20:09:29.018861 systemd-logind[1631]: New session 21 of user core. Oct 2 20:09:29.026000 audit[3546]: USER_START pid=3546 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.027000 audit[3548]: CRED_ACQ pid=3548 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.246267 sshd[3546]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:29.250000 audit[3546]: USER_END pid=3546 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.250000 audit[3546]: CRED_DISP pid=3546 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.254076 systemd[1]: sshd@20-172.31.30.99:22-139.178.89.65:47054.service: Deactivated successfully. Oct 2 20:09:29.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.99:22-139.178.89.65:47054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:29.255662 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:09:29.257267 systemd-logind[1631]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:09:29.258582 systemd-logind[1631]: Removed session 21. Oct 2 20:09:31.939810 kubelet[2700]: E1002 20:09:31.939779 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:36.941215 kubelet[2700]: E1002 20:09:36.941176 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:39.276421 systemd[1]: Started sshd@21-172.31.30.99:22-139.178.89.65:52526.service. Oct 2 20:09:39.285581 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:09:39.285712 kernel: audit: type=1130 audit(1696277379.276:1278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.99:22-139.178.89.65:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:39.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.99:22-139.178.89.65:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:39.444000 audit[3558]: USER_ACCT pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.454464 kernel: audit: type=1101 audit(1696277379.444:1279): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.454568 sshd[3558]: Accepted publickey for core from 139.178.89.65 port 52526 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:39.453000 audit[3558]: CRED_ACQ pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.455777 sshd[3558]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:39.465655 systemd[1]: Started session-22.scope. Oct 2 20:09:39.468241 kernel: audit: type=1103 audit(1696277379.453:1280): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.468428 kernel: audit: type=1006 audit(1696277379.453:1281): pid=3558 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:09:39.468498 kernel: audit: type=1300 audit(1696277379.453:1281): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd6653b60 a2=3 a3=0 items=0 ppid=1 pid=3558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:39.453000 audit[3558]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd6653b60 a2=3 a3=0 items=0 ppid=1 pid=3558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:39.468873 systemd-logind[1631]: New session 22 of user core. Oct 2 20:09:39.453000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:39.486282 kernel: audit: type=1327 audit(1696277379.453:1281): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:39.489000 audit[3558]: USER_START pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.489000 audit[3560]: CRED_ACQ pid=3560 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.510480 kernel: audit: type=1105 audit(1696277379.489:1282): pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.510636 kernel: audit: type=1103 audit(1696277379.489:1283): pid=3560 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.694956 sshd[3558]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:39.695000 audit[3558]: USER_END pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.699326 systemd[1]: sshd@21-172.31.30.99:22-139.178.89.65:52526.service: Deactivated successfully. Oct 2 20:09:39.701535 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:09:39.704608 systemd-logind[1631]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:09:39.696000 audit[3558]: CRED_DISP pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.707279 systemd-logind[1631]: Removed session 22. Oct 2 20:09:39.713159 kernel: audit: type=1106 audit(1696277379.695:1284): pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.713456 kernel: audit: type=1104 audit(1696277379.696:1285): pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:39.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.99:22-139.178.89.65:52526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:39.958458 kubelet[2700]: E1002 20:09:39.958348 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:09:41.942629 kubelet[2700]: E1002 20:09:41.942601 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:46.944660 kubelet[2700]: E1002 20:09:46.944631 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:49.732551 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:49.732701 kernel: audit: type=1130 audit(1696277389.724:1287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.99:22-139.178.89.65:34674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.99:22-139.178.89.65:34674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:49.724160 systemd[1]: Started sshd@22-172.31.30.99:22-139.178.89.65:34674.service. Oct 2 20:09:49.890000 audit[3572]: USER_ACCT pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.891266 sshd[3572]: Accepted publickey for core from 139.178.89.65 port 34674 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:49.901017 kernel: audit: type=1101 audit(1696277389.890:1288): pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.901143 kernel: audit: type=1103 audit(1696277389.899:1289): pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.899000 audit[3572]: CRED_ACQ pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.900757 sshd[3572]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:49.908953 systemd[1]: Started session-23.scope. Oct 2 20:09:49.910957 kernel: audit: type=1006 audit(1696277389.899:1290): pid=3572 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:09:49.911044 kernel: audit: type=1300 audit(1696277389.899:1290): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfee83ae0 a2=3 a3=0 items=0 ppid=1 pid=3572 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.899000 audit[3572]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfee83ae0 a2=3 a3=0 items=0 ppid=1 pid=3572 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:49.911323 systemd-logind[1631]: New session 23 of user core. Oct 2 20:09:49.899000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:49.919617 kernel: audit: type=1327 audit(1696277389.899:1290): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:49.920000 audit[3572]: USER_START pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.920000 audit[3574]: CRED_ACQ pid=3574 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.933431 kernel: audit: type=1105 audit(1696277389.920:1291): pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:49.933557 kernel: audit: type=1103 audit(1696277389.920:1292): pid=3574 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.107188 sshd[3572]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:50.108000 audit[3572]: USER_END pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.115327 kernel: audit: type=1106 audit(1696277390.108:1293): pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.108000 audit[3572]: CRED_DISP pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.121376 kernel: audit: type=1104 audit(1696277390.108:1294): pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.117424 systemd-logind[1631]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:09:50.119639 systemd[1]: sshd@22-172.31.30.99:22-139.178.89.65:34674.service: Deactivated successfully. Oct 2 20:09:50.120588 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:09:50.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.99:22-139.178.89.65:34674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:50.122365 systemd-logind[1631]: Removed session 23. Oct 2 20:09:50.960020 env[1643]: time="2023-10-02T20:09:50.959638849Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:09:50.988014 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2715475047.mount: Deactivated successfully. Oct 2 20:09:50.995808 env[1643]: time="2023-10-02T20:09:50.995753432Z" level=info msg="CreateContainer within sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\"" Oct 2 20:09:50.997110 env[1643]: time="2023-10-02T20:09:50.997072228Z" level=info msg="StartContainer for \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\"" Oct 2 20:09:51.042129 systemd[1]: Started cri-containerd-77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15.scope. Oct 2 20:09:51.074892 systemd[1]: cri-containerd-77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15.scope: Deactivated successfully. Oct 2 20:09:51.101879 env[1643]: time="2023-10-02T20:09:51.101817306Z" level=info msg="shim disconnected" id=77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15 Oct 2 20:09:51.101879 env[1643]: time="2023-10-02T20:09:51.101880963Z" level=warning msg="cleaning up after shim disconnected" id=77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15 namespace=k8s.io Oct 2 20:09:51.102359 env[1643]: time="2023-10-02T20:09:51.101894126Z" level=info msg="cleaning up dead shim" Oct 2 20:09:51.113852 env[1643]: time="2023-10-02T20:09:51.113791869Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3609 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:09:51Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:09:51.114264 env[1643]: time="2023-10-02T20:09:51.114161511Z" level=error msg="copy shim log" error="read /proc/self/fd/55: file already closed" Oct 2 20:09:51.115191 env[1643]: time="2023-10-02T20:09:51.115084109Z" level=error msg="Failed to pipe stdout of container \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\"" error="reading from a closed fifo" Oct 2 20:09:51.118385 env[1643]: time="2023-10-02T20:09:51.118325794Z" level=error msg="Failed to pipe stderr of container \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\"" error="reading from a closed fifo" Oct 2 20:09:51.121109 env[1643]: time="2023-10-02T20:09:51.121051553Z" level=error msg="StartContainer for \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:09:51.121392 kubelet[2700]: E1002 20:09:51.121366 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15" Oct 2 20:09:51.121937 kubelet[2700]: E1002 20:09:51.121498 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:09:51.121937 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:09:51.121937 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:09:51.121937 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-gskpm,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:09:51.122087 kubelet[2700]: E1002 20:09:51.121556 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:09:51.518578 kubelet[2700]: I1002 20:09:51.518541 2700 scope.go:115] "RemoveContainer" containerID="a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08" Oct 2 20:09:51.519069 kubelet[2700]: I1002 20:09:51.518999 2700 scope.go:115] "RemoveContainer" containerID="a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08" Oct 2 20:09:51.521025 env[1643]: time="2023-10-02T20:09:51.520980692Z" level=info msg="RemoveContainer for \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\"" Oct 2 20:09:51.527254 env[1643]: time="2023-10-02T20:09:51.524198074Z" level=info msg="RemoveContainer for \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\"" Oct 2 20:09:51.527254 env[1643]: time="2023-10-02T20:09:51.524342227Z" level=error msg="RemoveContainer for \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\" failed" error="failed to set removing state for container \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\": container is already in removing state" Oct 2 20:09:51.527463 kubelet[2700]: E1002 20:09:51.524613 2700 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\": container is already in removing state" containerID="a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08" Oct 2 20:09:51.527463 kubelet[2700]: E1002 20:09:51.524649 2700 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08": container is already in removing state; Skipping pod "cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)" Oct 2 20:09:51.527463 kubelet[2700]: E1002 20:09:51.525176 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:09:51.529300 env[1643]: time="2023-10-02T20:09:51.528831134Z" level=info msg="RemoveContainer for \"a83f585d4d6c8bb30dbb83e5de8d8c666570e3a0a03bb8fb84e5d2016948fb08\" returns successfully" Oct 2 20:09:51.946172 kubelet[2700]: E1002 20:09:51.946132 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:51.980306 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15-rootfs.mount: Deactivated successfully. Oct 2 20:09:54.212141 kubelet[2700]: W1002 20:09:54.212098 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice/cri-containerd-77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15.scope WatchSource:0}: task 77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15 not found: not found Oct 2 20:09:56.947080 kubelet[2700]: E1002 20:09:56.947050 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:00.143205 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:00.144024 kernel: audit: type=1130 audit(1696277400.139:1296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.99:22-139.178.89.65:54030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:00.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.99:22-139.178.89.65:54030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:00.139999 systemd[1]: Started sshd@23-172.31.30.99:22-139.178.89.65:54030.service. Oct 2 20:10:00.331000 audit[3622]: USER_ACCT pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.333469 sshd[3622]: Accepted publickey for core from 139.178.89.65 port 54030 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:00.340000 audit[3622]: CRED_ACQ pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.342826 sshd[3622]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:00.350932 kernel: audit: type=1101 audit(1696277400.331:1297): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.351113 kernel: audit: type=1103 audit(1696277400.340:1298): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.351152 kernel: audit: type=1006 audit(1696277400.340:1299): pid=3622 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:10:00.353255 systemd[1]: Started session-24.scope. Oct 2 20:10:00.340000 audit[3622]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbb2024b0 a2=3 a3=0 items=0 ppid=1 pid=3622 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:00.358029 systemd-logind[1631]: New session 24 of user core. Oct 2 20:10:00.364681 kernel: audit: type=1300 audit(1696277400.340:1299): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbb2024b0 a2=3 a3=0 items=0 ppid=1 pid=3622 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:00.340000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:00.368360 kernel: audit: type=1327 audit(1696277400.340:1299): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:00.367000 audit[3622]: USER_START pid=3622 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.370000 audit[3624]: CRED_ACQ pid=3624 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.376414 kernel: audit: type=1105 audit(1696277400.367:1300): pid=3622 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.376475 kernel: audit: type=1103 audit(1696277400.370:1301): pid=3624 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.570340 sshd[3622]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:00.571000 audit[3622]: USER_END pid=3622 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.571000 audit[3622]: CRED_DISP pid=3622 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.581297 systemd[1]: sshd@23-172.31.30.99:22-139.178.89.65:54030.service: Deactivated successfully. Oct 2 20:10:00.582433 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:10:00.586047 kernel: audit: type=1106 audit(1696277400.571:1302): pid=3622 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.586159 kernel: audit: type=1104 audit(1696277400.571:1303): pid=3622 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:00.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.30.99:22-139.178.89.65:54030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:00.585494 systemd-logind[1631]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:10:00.587015 systemd-logind[1631]: Removed session 24. Oct 2 20:10:01.948505 kubelet[2700]: E1002 20:10:01.948472 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:04.957732 kubelet[2700]: E1002 20:10:04.957698 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:10:06.950244 kubelet[2700]: E1002 20:10:06.950048 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:10.603650 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:10.603754 kernel: audit: type=1130 audit(1696277410.595:1305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.30.99:22-139.178.89.65:38454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:10.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.30.99:22-139.178.89.65:38454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:10.596418 systemd[1]: Started sshd@24-172.31.30.99:22-139.178.89.65:38454.service. Oct 2 20:10:10.758000 audit[3634]: USER_ACCT pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.766998 sshd[3634]: Accepted publickey for core from 139.178.89.65 port 38454 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:10.767501 kernel: audit: type=1101 audit(1696277410.758:1306): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.766000 audit[3634]: CRED_ACQ pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.768263 sshd[3634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:10.775833 systemd[1]: Started session-25.scope. Oct 2 20:10:10.776947 systemd-logind[1631]: New session 25 of user core. Oct 2 20:10:10.779786 kernel: audit: type=1103 audit(1696277410.766:1307): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.779892 kernel: audit: type=1006 audit(1696277410.766:1308): pid=3634 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:10:10.779926 kernel: audit: type=1300 audit(1696277410.766:1308): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce6d88ab0 a2=3 a3=0 items=0 ppid=1 pid=3634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:10.766000 audit[3634]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce6d88ab0 a2=3 a3=0 items=0 ppid=1 pid=3634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:10.786050 kernel: audit: type=1327 audit(1696277410.766:1308): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:10.766000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:10.788214 kernel: audit: type=1105 audit(1696277410.784:1309): pid=3634 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.784000 audit[3634]: USER_START pid=3634 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.786000 audit[3636]: CRED_ACQ pid=3636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:10.799773 kernel: audit: type=1103 audit(1696277410.786:1310): pid=3636 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.060896 sshd[3634]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:11.062000 audit[3634]: USER_END pid=3634 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.066723 systemd[1]: sshd@24-172.31.30.99:22-139.178.89.65:38454.service: Deactivated successfully. Oct 2 20:10:11.067860 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:10:11.073124 systemd-logind[1631]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:10:11.075356 kernel: audit: type=1106 audit(1696277411.062:1311): pid=3634 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.075557 kernel: audit: type=1104 audit(1696277411.062:1312): pid=3634 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.062000 audit[3634]: CRED_DISP pid=3634 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.078262 systemd-logind[1631]: Removed session 25. Oct 2 20:10:11.065000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.30.99:22-139.178.89.65:38454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:11.951614 kubelet[2700]: E1002 20:10:11.951589 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:15.957483 kubelet[2700]: E1002 20:10:15.957441 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:10:16.954096 kubelet[2700]: E1002 20:10:16.954066 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:20.401000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.403861 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:20.403975 kernel: audit: type=1400 audit(1696277420.401:1315): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.401000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.401000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00156ef60 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:20.424376 kernel: audit: type=1400 audit(1696277420.401:1314): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.424523 kernel: audit: type=1300 audit(1696277420.401:1314): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00156ef60 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:20.424560 kernel: audit: type=1327 audit(1696277420.401:1314): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:20.401000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:20.401000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00148ec20 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:20.440411 kernel: audit: type=1300 audit(1696277420.401:1315): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00148ec20 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:20.440626 kernel: audit: type=1327 audit(1696277420.401:1315): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:20.401000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:21.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.30.99:22-139.178.89.65:48104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.091967 systemd[1]: Started sshd@25-172.31.30.99:22-139.178.89.65:48104.service. Oct 2 20:10:21.101513 kernel: audit: type=1130 audit(1696277421.090:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.30.99:22-139.178.89.65:48104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.264000 audit[3648]: USER_ACCT pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.266296 sshd[3648]: Accepted publickey for core from 139.178.89.65 port 48104 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:21.272000 audit[3648]: CRED_ACQ pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.275081 sshd[3648]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:21.282770 kernel: audit: type=1101 audit(1696277421.264:1317): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.282880 kernel: audit: type=1103 audit(1696277421.272:1318): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.282924 kernel: audit: type=1006 audit(1696277421.273:1319): pid=3648 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:10:21.285000 systemd[1]: Started session-26.scope. Oct 2 20:10:21.273000 audit[3648]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff67460650 a2=3 a3=0 items=0 ppid=1 pid=3648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:21.273000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:21.286607 systemd-logind[1631]: New session 26 of user core. Oct 2 20:10:21.292000 audit[3648]: USER_START pid=3648 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.294000 audit[3650]: CRED_ACQ pid=3650 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.538745 sshd[3648]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:21.549000 audit[3648]: USER_END pid=3648 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.549000 audit[3648]: CRED_DISP pid=3648 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:21.558766 systemd[1]: sshd@25-172.31.30.99:22-139.178.89.65:48104.service: Deactivated successfully. Oct 2 20:10:21.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.30.99:22-139.178.89.65:48104 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:21.561697 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:10:21.564590 systemd-logind[1631]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:10:21.566993 systemd-logind[1631]: Removed session 26. Oct 2 20:10:21.955295 kubelet[2700]: E1002 20:10:21.955263 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:23.101000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:23.101000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00aae9dd0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:10:23.101000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:23.103000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:23.103000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:23.103000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0028bb300 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:10:23.103000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:23.103000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00aae9fb0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:10:23.103000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:23.127000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:23.127000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:23.127000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=56 a1=c00aeb9470 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:10:23.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:23.127000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c002472860 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:10:23.127000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:23.129000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:23.129000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=53 a1=c00aeb9560 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:10:23.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:10:26.956363 kubelet[2700]: E1002 20:10:26.956312 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:27.553297 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:10:27.553456 kernel: audit: type=1400 audit(1696277427.545:1331): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.545000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.560657 kernel: audit: type=1400 audit(1696277427.546:1332): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.546000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.546000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00148f000 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:27.546000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:27.578016 kernel: audit: type=1300 audit(1696277427.546:1332): arch=c000003e syscall=254 success=no exit=-13 a0=12 a1=c00148f000 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:27.578158 kernel: audit: type=1327 audit(1696277427.546:1332): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:27.578200 kernel: audit: type=1300 audit(1696277427.545:1331): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00148efc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:27.545000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00148efc0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:27.545000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:27.594408 kernel: audit: type=1327 audit(1696277427.545:1331): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:27.594700 kernel: audit: type=1400 audit(1696277427.560:1333): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.560000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.560000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00148f140 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:27.609853 kernel: audit: type=1300 audit(1696277427.560:1333): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00148f140 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:27.610233 kernel: audit: type=1327 audit(1696277427.560:1333): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:27.560000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:27.570000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.622565 kernel: audit: type=1400 audit(1696277427.570:1334): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:27.570000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00148f180 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:10:27.570000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:29.957716 kubelet[2700]: E1002 20:10:29.957668 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-2l582_kube-system(91c5357c-e36c-495c-8aed-645f2cb6b1ff)\"" pod="kube-system/cilium-2l582" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff Oct 2 20:10:31.568535 systemd[1]: Started sshd@26-172.31.30.99:22-139.178.89.65:56712.service. Oct 2 20:10:31.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.30.99:22-139.178.89.65:56712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:31.746000 audit[3663]: USER_ACCT pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.747284 sshd[3663]: Accepted publickey for core from 139.178.89.65 port 56712 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:31.748000 audit[3663]: CRED_ACQ pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.748000 audit[3663]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9a912610 a2=3 a3=0 items=0 ppid=1 pid=3663 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:31.748000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:31.748840 sshd[3663]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:31.759501 systemd[1]: Started session-27.scope. Oct 2 20:10:31.760359 systemd-logind[1631]: New session 27 of user core. Oct 2 20:10:31.769000 audit[3663]: USER_START pid=3663 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.771000 audit[3666]: CRED_ACQ pid=3666 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.958781 kubelet[2700]: E1002 20:10:31.958666 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:31.980832 sshd[3663]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:31.983000 audit[3663]: USER_END pid=3663 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.983000 audit[3663]: CRED_DISP pid=3663 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:31.985784 systemd[1]: sshd@26-172.31.30.99:22-139.178.89.65:56712.service: Deactivated successfully. Oct 2 20:10:31.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.30.99:22-139.178.89.65:56712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:31.986918 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:10:31.987864 systemd-logind[1631]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:10:31.989059 systemd-logind[1631]: Removed session 27. Oct 2 20:10:36.959855 kubelet[2700]: E1002 20:10:36.959766 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:40.644916 amazon-ssm-agent[1619]: 2023-10-02 20:10:40 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 20:10:40.745997 amazon-ssm-agent[1619]: 2023-10-02 20:10:40 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0b6c1a9daf5ff9534 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0b6c1a9daf5ff9534 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:10:40.745997 amazon-ssm-agent[1619]: status code: 400, request id: 5c39fb75-1417-42ca-acb0-8a07b313834e Oct 2 20:10:41.963894 kubelet[2700]: E1002 20:10:41.963676 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:42.029650 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:10:42.029815 kernel: audit: type=1130 audit(1696277442.018:1344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.30.99:22-139.178.89.65:60448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:42.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.30.99:22-139.178.89.65:60448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:42.018518 systemd[1]: Started sshd@27-172.31.30.99:22-139.178.89.65:60448.service. Oct 2 20:10:42.190000 audit[3680]: USER_ACCT pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.201186 sshd[3680]: Accepted publickey for core from 139.178.89.65 port 60448 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:42.202681 kernel: audit: type=1101 audit(1696277442.190:1345): pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.201000 audit[3680]: CRED_ACQ pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.207441 sshd[3680]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:42.224269 kernel: audit: type=1103 audit(1696277442.201:1346): pid=3680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.241246 kernel: audit: type=1006 audit(1696277442.202:1347): pid=3680 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 20:10:42.252344 kernel: audit: type=1300 audit(1696277442.202:1347): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd8433990 a2=3 a3=0 items=0 ppid=1 pid=3680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:42.252490 kernel: audit: type=1327 audit(1696277442.202:1347): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:42.202000 audit[3680]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd8433990 a2=3 a3=0 items=0 ppid=1 pid=3680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:42.202000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:42.247455 systemd[1]: Started session-28.scope. Oct 2 20:10:42.248032 systemd-logind[1631]: New session 28 of user core. Oct 2 20:10:42.265000 audit[3680]: USER_START pid=3680 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.269000 audit[3683]: CRED_ACQ pid=3683 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.284757 kernel: audit: type=1105 audit(1696277442.265:1348): pid=3680 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.284886 kernel: audit: type=1103 audit(1696277442.269:1349): pid=3683 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.482539 sshd[3680]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:42.484000 audit[3680]: USER_END pid=3680 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.487024 systemd[1]: sshd@27-172.31.30.99:22-139.178.89.65:60448.service: Deactivated successfully. Oct 2 20:10:42.488198 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:10:42.493139 systemd-logind[1631]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:10:42.495315 kernel: audit: type=1106 audit(1696277442.484:1350): pid=3680 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.495524 systemd-logind[1631]: Removed session 28. Oct 2 20:10:42.484000 audit[3680]: CRED_DISP pid=3680 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.509584 kernel: audit: type=1104 audit(1696277442.484:1351): pid=3680 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.487000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.30.99:22-139.178.89.65:60448 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:42.514271 systemd[1]: Started sshd@28-172.31.30.99:22-139.178.89.65:60454.service. Oct 2 20:10:42.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.30.99:22-139.178.89.65:60454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:42.689000 audit[3693]: USER_ACCT pid=3693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.689897 sshd[3693]: Accepted publickey for core from 139.178.89.65 port 60454 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:42.690000 audit[3693]: CRED_ACQ pid=3693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.690000 audit[3693]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf4e1f1e0 a2=3 a3=0 items=0 ppid=1 pid=3693 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:42.690000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:42.691502 sshd[3693]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:42.697478 systemd[1]: Started session-29.scope. Oct 2 20:10:42.698079 systemd-logind[1631]: New session 29 of user core. Oct 2 20:10:42.704000 audit[3693]: USER_START pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:42.706000 audit[3695]: CRED_ACQ pid=3695 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.972247 env[1643]: time="2023-10-02T20:10:43.971883782Z" level=info msg="StopPodSandbox for \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\"" Oct 2 20:10:43.972247 env[1643]: time="2023-10-02T20:10:43.971988366Z" level=info msg="Container to stop \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:43.975249 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916-shm.mount: Deactivated successfully. Oct 2 20:10:43.991637 systemd[1]: cri-containerd-93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916.scope: Deactivated successfully. Oct 2 20:10:43.991000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:10:43.996000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:10:44.059793 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916-rootfs.mount: Deactivated successfully. Oct 2 20:10:44.076638 env[1643]: time="2023-10-02T20:10:44.076584504Z" level=info msg="shim disconnected" id=93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916 Oct 2 20:10:44.077697 env[1643]: time="2023-10-02T20:10:44.077636698Z" level=warning msg="cleaning up after shim disconnected" id=93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916 namespace=k8s.io Oct 2 20:10:44.077916 env[1643]: time="2023-10-02T20:10:44.077899320Z" level=info msg="cleaning up dead shim" Oct 2 20:10:44.107264 env[1643]: time="2023-10-02T20:10:44.107198055Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3723 runtime=io.containerd.runc.v2\n" Oct 2 20:10:44.107840 env[1643]: time="2023-10-02T20:10:44.107807843Z" level=info msg="TearDown network for sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" successfully" Oct 2 20:10:44.107974 env[1643]: time="2023-10-02T20:10:44.107952256Z" level=info msg="StopPodSandbox for \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" returns successfully" Oct 2 20:10:44.290720 kubelet[2700]: I1002 20:10:44.290521 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-lib-modules\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.290720 kubelet[2700]: I1002 20:10:44.290570 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.290720 kubelet[2700]: I1002 20:10:44.290599 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hostproc\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.290720 kubelet[2700]: I1002 20:10:44.290634 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-gskpm\" (UniqueName: \"kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-kube-api-access-gskpm\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.290720 kubelet[2700]: I1002 20:10:44.290659 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-net\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.290720 kubelet[2700]: I1002 20:10:44.290685 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hubble-tls\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292640 kubelet[2700]: I1002 20:10:44.290709 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-xtables-lock\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292640 kubelet[2700]: I1002 20:10:44.290737 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-kernel\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292640 kubelet[2700]: I1002 20:10:44.290971 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/91c5357c-e36c-495c-8aed-645f2cb6b1ff-clustermesh-secrets\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292640 kubelet[2700]: I1002 20:10:44.291015 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-bpf-maps\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292640 kubelet[2700]: I1002 20:10:44.291040 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-run\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292640 kubelet[2700]: I1002 20:10:44.291070 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-etc-cni-netd\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292978 kubelet[2700]: I1002 20:10:44.291102 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-config-path\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292978 kubelet[2700]: I1002 20:10:44.291127 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-cgroup\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292978 kubelet[2700]: I1002 20:10:44.291153 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cni-path\") pod \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\" (UID: \"91c5357c-e36c-495c-8aed-645f2cb6b1ff\") " Oct 2 20:10:44.292978 kubelet[2700]: I1002 20:10:44.291208 2700 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-lib-modules\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.292978 kubelet[2700]: I1002 20:10:44.291269 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cni-path" (OuterVolumeSpecName: "cni-path") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.292978 kubelet[2700]: I1002 20:10:44.291298 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hostproc" (OuterVolumeSpecName: "hostproc") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.293737 kubelet[2700]: I1002 20:10:44.293704 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.293948 kubelet[2700]: I1002 20:10:44.293927 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.294029 kubelet[2700]: I1002 20:10:44.293963 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.294029 kubelet[2700]: I1002 20:10:44.293992 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.294179 kubelet[2700]: I1002 20:10:44.294035 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.294179 kubelet[2700]: I1002 20:10:44.294056 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.294398 kubelet[2700]: W1002 20:10:44.294359 2700 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/91c5357c-e36c-495c-8aed-645f2cb6b1ff/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:44.296374 kubelet[2700]: I1002 20:10:44.296330 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:44.296471 kubelet[2700]: I1002 20:10:44.296395 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:44.310807 systemd[1]: var-lib-kubelet-pods-91c5357c\x2de36c\x2d495c\x2d8aed\x2d645f2cb6b1ff-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:10:44.313950 systemd[1]: var-lib-kubelet-pods-91c5357c\x2de36c\x2d495c\x2d8aed\x2d645f2cb6b1ff-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dgskpm.mount: Deactivated successfully. Oct 2 20:10:44.316598 kubelet[2700]: I1002 20:10:44.316558 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/91c5357c-e36c-495c-8aed-645f2cb6b1ff-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:10:44.317079 kubelet[2700]: I1002 20:10:44.316937 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-kube-api-access-gskpm" (OuterVolumeSpecName: "kube-api-access-gskpm") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "kube-api-access-gskpm". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:44.317244 kubelet[2700]: I1002 20:10:44.317001 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "91c5357c-e36c-495c-8aed-645f2cb6b1ff" (UID: "91c5357c-e36c-495c-8aed-645f2cb6b1ff"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:44.318123 systemd[1]: var-lib-kubelet-pods-91c5357c\x2de36c\x2d495c\x2d8aed\x2d645f2cb6b1ff-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:10:44.392357 kubelet[2700]: I1002 20:10:44.392323 2700 reconciler.go:399] "Volume detached for volume \"kube-api-access-gskpm\" (UniqueName: \"kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-kube-api-access-gskpm\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392357 kubelet[2700]: I1002 20:10:44.392362 2700 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-net\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392376 2700 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hubble-tls\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392389 2700 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-xtables-lock\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392405 2700 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-host-proc-sys-kernel\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392419 2700 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/91c5357c-e36c-495c-8aed-645f2cb6b1ff-clustermesh-secrets\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392433 2700 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-bpf-maps\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392445 2700 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-run\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392459 2700 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-etc-cni-netd\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.392704 kubelet[2700]: I1002 20:10:44.392471 2700 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-config-path\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.393445 kubelet[2700]: I1002 20:10:44.392504 2700 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cilium-cgroup\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.393445 kubelet[2700]: I1002 20:10:44.392517 2700 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-cni-path\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.393445 kubelet[2700]: I1002 20:10:44.392529 2700 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/91c5357c-e36c-495c-8aed-645f2cb6b1ff-hostproc\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:44.670358 kubelet[2700]: I1002 20:10:44.670332 2700 scope.go:115] "RemoveContainer" containerID="77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15" Oct 2 20:10:44.674466 env[1643]: time="2023-10-02T20:10:44.674061432Z" level=info msg="RemoveContainer for \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\"" Oct 2 20:10:44.678744 systemd[1]: Removed slice kubepods-burstable-pod91c5357c_e36c_495c_8aed_645f2cb6b1ff.slice. Oct 2 20:10:44.680536 env[1643]: time="2023-10-02T20:10:44.679828826Z" level=info msg="RemoveContainer for \"77e4d768757dbf8a0a95ad0007ba56ad93c48969ee2821303778f5612a058b15\" returns successfully" Oct 2 20:10:44.714387 kubelet[2700]: I1002 20:10:44.714353 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:10:44.714767 kubelet[2700]: E1002 20:10:44.714717 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.715045 kubelet[2700]: E1002 20:10:44.715029 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.715166 kubelet[2700]: E1002 20:10:44.715155 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.715290 kubelet[2700]: E1002 20:10:44.715280 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.715415 kubelet[2700]: I1002 20:10:44.715403 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.715513 kubelet[2700]: I1002 20:10:44.715503 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.715788 kubelet[2700]: I1002 20:10:44.715774 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.715961 kubelet[2700]: I1002 20:10:44.715945 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.716235 kubelet[2700]: E1002 20:10:44.716208 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.716344 kubelet[2700]: E1002 20:10:44.716334 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.716506 kubelet[2700]: I1002 20:10:44.716497 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.716584 kubelet[2700]: I1002 20:10:44.716577 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="91c5357c-e36c-495c-8aed-645f2cb6b1ff" containerName="mount-cgroup" Oct 2 20:10:44.728039 systemd[1]: Created slice kubepods-burstable-podd2572e17_1e33_4515_a03e_715d339df04c.slice. Oct 2 20:10:44.896170 kubelet[2700]: I1002 20:10:44.896132 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-bpf-maps\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896170 kubelet[2700]: I1002 20:10:44.896189 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-net\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896442 kubelet[2700]: I1002 20:10:44.896231 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-xtables-lock\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896442 kubelet[2700]: I1002 20:10:44.896261 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d2572e17-1e33-4515-a03e-715d339df04c-clustermesh-secrets\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896442 kubelet[2700]: I1002 20:10:44.896289 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-kernel\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896442 kubelet[2700]: I1002 20:10:44.896317 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-etc-cni-netd\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896442 kubelet[2700]: I1002 20:10:44.896343 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-hubble-tls\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896442 kubelet[2700]: I1002 20:10:44.896373 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-run\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896827 kubelet[2700]: I1002 20:10:44.896399 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d2572e17-1e33-4515-a03e-715d339df04c-cilium-config-path\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896827 kubelet[2700]: I1002 20:10:44.896431 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-57l6z\" (UniqueName: \"kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896827 kubelet[2700]: I1002 20:10:44.896462 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-hostproc\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896827 kubelet[2700]: I1002 20:10:44.896505 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-lib-modules\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896827 kubelet[2700]: I1002 20:10:44.896542 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cni-path\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.896827 kubelet[2700]: I1002 20:10:44.896622 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-cgroup\") pod \"cilium-ngx9z\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " pod="kube-system/cilium-ngx9z" Oct 2 20:10:44.960393 kubelet[2700]: I1002 20:10:44.960299 2700 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=91c5357c-e36c-495c-8aed-645f2cb6b1ff path="/var/lib/kubelet/pods/91c5357c-e36c-495c-8aed-645f2cb6b1ff/volumes" Oct 2 20:10:45.022589 kubelet[2700]: E1002 20:10:45.022549 2700 projected.go:196] Error preparing data for projected volume kube-api-access-57l6z for pod kube-system/cilium-ngx9z: failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:45.025344 kubelet[2700]: E1002 20:10:45.025304 2700 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z podName:d2572e17-1e33-4515-a03e-715d339df04c nodeName:}" failed. No retries permitted until 2023-10-02 20:10:45.522631614 +0000 UTC m=+259.068108095 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-57l6z" (UniqueName: "kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z") pod "cilium-ngx9z" (UID: "d2572e17-1e33-4515-a03e-715d339df04c") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:45.357326 env[1643]: time="2023-10-02T20:10:45.356651508Z" level=info msg="StopContainer for \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\" with timeout 30 (s)" Oct 2 20:10:45.358251 env[1643]: time="2023-10-02T20:10:45.358031792Z" level=info msg="Stop container \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\" with signal terminated" Oct 2 20:10:45.382000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:10:45.383673 systemd[1]: cri-containerd-8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6.scope: Deactivated successfully. Oct 2 20:10:45.387000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:10:45.408334 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6-rootfs.mount: Deactivated successfully. Oct 2 20:10:45.442241 env[1643]: time="2023-10-02T20:10:45.442170317Z" level=info msg="shim disconnected" id=8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6 Oct 2 20:10:45.442241 env[1643]: time="2023-10-02T20:10:45.442242422Z" level=warning msg="cleaning up after shim disconnected" id=8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6 namespace=k8s.io Oct 2 20:10:45.442557 env[1643]: time="2023-10-02T20:10:45.442254852Z" level=info msg="cleaning up dead shim" Oct 2 20:10:45.455068 env[1643]: time="2023-10-02T20:10:45.455005367Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3760 runtime=io.containerd.runc.v2\n" Oct 2 20:10:45.457470 env[1643]: time="2023-10-02T20:10:45.457425607Z" level=info msg="StopContainer for \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\" returns successfully" Oct 2 20:10:45.458006 env[1643]: time="2023-10-02T20:10:45.457974103Z" level=info msg="StopPodSandbox for \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\"" Oct 2 20:10:45.458114 env[1643]: time="2023-10-02T20:10:45.458035690Z" level=info msg="Container to stop \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:45.461697 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de-shm.mount: Deactivated successfully. Oct 2 20:10:45.473194 systemd[1]: cri-containerd-69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de.scope: Deactivated successfully. Oct 2 20:10:45.472000 audit: BPF prog-id=113 op=UNLOAD Oct 2 20:10:45.475000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:10:45.499546 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de-rootfs.mount: Deactivated successfully. Oct 2 20:10:45.512257 env[1643]: time="2023-10-02T20:10:45.512191199Z" level=info msg="shim disconnected" id=69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de Oct 2 20:10:45.512516 env[1643]: time="2023-10-02T20:10:45.512252246Z" level=warning msg="cleaning up after shim disconnected" id=69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de namespace=k8s.io Oct 2 20:10:45.512516 env[1643]: time="2023-10-02T20:10:45.512275384Z" level=info msg="cleaning up dead shim" Oct 2 20:10:45.521320 env[1643]: time="2023-10-02T20:10:45.521265833Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3792 runtime=io.containerd.runc.v2\n" Oct 2 20:10:45.521665 env[1643]: time="2023-10-02T20:10:45.521631010Z" level=info msg="TearDown network for sandbox \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" successfully" Oct 2 20:10:45.521754 env[1643]: time="2023-10-02T20:10:45.521663877Z" level=info msg="StopPodSandbox for \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" returns successfully" Oct 2 20:10:45.604361 kubelet[2700]: E1002 20:10:45.604331 2700 projected.go:196] Error preparing data for projected volume kube-api-access-57l6z for pod kube-system/cilium-ngx9z: failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:45.604868 kubelet[2700]: E1002 20:10:45.604415 2700 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z podName:d2572e17-1e33-4515-a03e-715d339df04c nodeName:}" failed. No retries permitted until 2023-10-02 20:10:46.604395 +0000 UTC m=+260.149871469 (durationBeforeRetry 1s). Error: MountVolume.SetUp failed for volume "kube-api-access-57l6z" (UniqueName: "kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z") pod "cilium-ngx9z" (UID: "d2572e17-1e33-4515-a03e-715d339df04c") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:45.675180 kubelet[2700]: I1002 20:10:45.674129 2700 scope.go:115] "RemoveContainer" containerID="8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6" Oct 2 20:10:45.677361 env[1643]: time="2023-10-02T20:10:45.677323989Z" level=info msg="RemoveContainer for \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\"" Oct 2 20:10:45.681774 env[1643]: time="2023-10-02T20:10:45.681726782Z" level=info msg="RemoveContainer for \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\" returns successfully" Oct 2 20:10:45.682058 kubelet[2700]: I1002 20:10:45.682040 2700 scope.go:115] "RemoveContainer" containerID="8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6" Oct 2 20:10:45.682487 env[1643]: time="2023-10-02T20:10:45.682417526Z" level=error msg="ContainerStatus for \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\": not found" Oct 2 20:10:45.682801 kubelet[2700]: E1002 20:10:45.682786 2700 remote_runtime.go:625] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\": not found" containerID="8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6" Oct 2 20:10:45.682935 kubelet[2700]: I1002 20:10:45.682926 2700 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6} err="failed to get container status \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\": rpc error: code = NotFound desc = an error occurred when try to find container \"8420033c1616918925c887e0611a97c07e896061120965d86740dfb720048dd6\": not found" Oct 2 20:10:45.701999 kubelet[2700]: I1002 20:10:45.701967 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a1541803-0bba-4426-acd5-88aee8638d56-cilium-config-path\") pod \"a1541803-0bba-4426-acd5-88aee8638d56\" (UID: \"a1541803-0bba-4426-acd5-88aee8638d56\") " Oct 2 20:10:45.702361 kubelet[2700]: I1002 20:10:45.702345 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-ll78p\" (UniqueName: \"kubernetes.io/projected/a1541803-0bba-4426-acd5-88aee8638d56-kube-api-access-ll78p\") pod \"a1541803-0bba-4426-acd5-88aee8638d56\" (UID: \"a1541803-0bba-4426-acd5-88aee8638d56\") " Oct 2 20:10:45.702540 kubelet[2700]: W1002 20:10:45.702356 2700 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/a1541803-0bba-4426-acd5-88aee8638d56/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:45.705381 kubelet[2700]: I1002 20:10:45.705273 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/a1541803-0bba-4426-acd5-88aee8638d56-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "a1541803-0bba-4426-acd5-88aee8638d56" (UID: "a1541803-0bba-4426-acd5-88aee8638d56"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:45.706717 kubelet[2700]: I1002 20:10:45.706679 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a1541803-0bba-4426-acd5-88aee8638d56-kube-api-access-ll78p" (OuterVolumeSpecName: "kube-api-access-ll78p") pod "a1541803-0bba-4426-acd5-88aee8638d56" (UID: "a1541803-0bba-4426-acd5-88aee8638d56"). InnerVolumeSpecName "kube-api-access-ll78p". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:45.803436 kubelet[2700]: I1002 20:10:45.803397 2700 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/a1541803-0bba-4426-acd5-88aee8638d56-cilium-config-path\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:45.803436 kubelet[2700]: I1002 20:10:45.803435 2700 reconciler.go:399] "Volume detached for volume \"kube-api-access-ll78p\" (UniqueName: \"kubernetes.io/projected/a1541803-0bba-4426-acd5-88aee8638d56-kube-api-access-ll78p\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:45.978785 systemd[1]: Removed slice kubepods-besteffort-poda1541803_0bba_4426_acd5_88aee8638d56.slice. Oct 2 20:10:46.006100 systemd[1]: var-lib-kubelet-pods-a1541803\x2d0bba\x2d4426\x2dacd5\x2d88aee8638d56-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dll78p.mount: Deactivated successfully. Oct 2 20:10:46.613420 kubelet[2700]: E1002 20:10:46.613389 2700 projected.go:196] Error preparing data for projected volume kube-api-access-57l6z for pod kube-system/cilium-ngx9z: failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:46.614033 kubelet[2700]: E1002 20:10:46.613470 2700 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z podName:d2572e17-1e33-4515-a03e-715d339df04c nodeName:}" failed. No retries permitted until 2023-10-02 20:10:48.613448187 +0000 UTC m=+262.158924666 (durationBeforeRetry 2s). Error: MountVolume.SetUp failed for volume "kube-api-access-57l6z" (UniqueName: "kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z") pod "cilium-ngx9z" (UID: "d2572e17-1e33-4515-a03e-715d339df04c") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:46.964702 kubelet[2700]: I1002 20:10:46.964315 2700 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=a1541803-0bba-4426-acd5-88aee8638d56 path="/var/lib/kubelet/pods/a1541803-0bba-4426-acd5-88aee8638d56/volumes" Oct 2 20:10:46.968736 kubelet[2700]: E1002 20:10:46.968717 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:47.290582 sshd[3693]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:47.305330 kernel: kauditd_printk_skb: 15 callbacks suppressed Oct 2 20:10:47.305497 kernel: audit: type=1106 audit(1696277447.291:1365): pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.291000 audit[3693]: USER_END pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.291000 audit[3693]: CRED_DISP pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.311170 systemd[1]: sshd@28-172.31.30.99:22-139.178.89.65:60454.service: Deactivated successfully. Oct 2 20:10:47.313673 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:10:47.315203 systemd-logind[1631]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:10:47.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.30.99:22-139.178.89.65:60454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.317148 systemd-logind[1631]: Removed session 29. Oct 2 20:10:47.323537 kernel: audit: type=1104 audit(1696277447.291:1366): pid=3693 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.323652 kernel: audit: type=1131 audit(1696277447.311:1367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.30.99:22-139.178.89.65:60454 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.324544 systemd[1]: Started sshd@29-172.31.30.99:22-139.178.89.65:54440.service. Oct 2 20:10:47.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.30.99:22-139.178.89.65:54440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.331584 kernel: audit: type=1130 audit(1696277447.323:1368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.30.99:22-139.178.89.65:54440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.510000 audit[3807]: USER_ACCT pid=3807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.519036 sshd[3807]: Accepted publickey for core from 139.178.89.65 port 54440 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:47.519395 kernel: audit: type=1101 audit(1696277447.510:1369): pid=3807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.518000 audit[3807]: CRED_ACQ pid=3807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.520106 sshd[3807]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:47.528214 systemd[1]: Started session-30.scope. Oct 2 20:10:47.530597 kernel: audit: type=1103 audit(1696277447.518:1370): pid=3807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.530714 kernel: audit: type=1006 audit(1696277447.518:1371): pid=3807 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:10:47.531390 kernel: audit: type=1300 audit(1696277447.518:1371): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed56a2420 a2=3 a3=0 items=0 ppid=1 pid=3807 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:47.518000 audit[3807]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed56a2420 a2=3 a3=0 items=0 ppid=1 pid=3807 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:47.530881 systemd-logind[1631]: New session 30 of user core. Oct 2 20:10:47.518000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:47.540181 kernel: audit: type=1327 audit(1696277447.518:1371): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:47.537000 audit[3807]: USER_START pid=3807 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.540000 audit[3809]: CRED_ACQ pid=3809 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.548321 kernel: audit: type=1105 audit(1696277447.537:1372): pid=3807 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:48.635720 kubelet[2700]: E1002 20:10:48.635680 2700 projected.go:196] Error preparing data for projected volume kube-api-access-57l6z for pod kube-system/cilium-ngx9z: failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:48.636185 kubelet[2700]: E1002 20:10:48.635764 2700 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z podName:d2572e17-1e33-4515-a03e-715d339df04c nodeName:}" failed. No retries permitted until 2023-10-02 20:10:52.635741899 +0000 UTC m=+266.181218383 (durationBeforeRetry 4s). Error: MountVolume.SetUp failed for volume "kube-api-access-57l6z" (UniqueName: "kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z") pod "cilium-ngx9z" (UID: "d2572e17-1e33-4515-a03e-715d339df04c") : failed to fetch token: serviceaccounts "cilium" not found Oct 2 20:10:51.970011 kubelet[2700]: E1002 20:10:51.969980 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:52.835976 env[1643]: time="2023-10-02T20:10:52.835925615Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ngx9z,Uid:d2572e17-1e33-4515-a03e-715d339df04c,Namespace:kube-system,Attempt:0,}" Oct 2 20:10:52.861132 env[1643]: time="2023-10-02T20:10:52.860994593Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:10:52.861323 env[1643]: time="2023-10-02T20:10:52.861147182Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:10:52.861323 env[1643]: time="2023-10-02T20:10:52.861181952Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:10:52.861634 env[1643]: time="2023-10-02T20:10:52.861575833Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811 pid=3823 runtime=io.containerd.runc.v2 Oct 2 20:10:52.888618 systemd[1]: Started cri-containerd-493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811.scope. Oct 2 20:10:52.927321 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:52.927455 kernel: audit: type=1400 audit(1696277452.923:1374): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.935903 kernel: audit: type=1400 audit(1696277452.923:1375): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.936067 kernel: audit: type=1400 audit(1696277452.923:1376): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.950071 kernel: audit: type=1400 audit(1696277452.923:1377): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.950540 kernel: audit: type=1400 audit(1696277452.923:1378): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.950600 kernel: audit: type=1400 audit(1696277452.923:1379): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.959582 kernel: audit: type=1400 audit(1696277452.923:1380): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.959913 kernel: audit: type=1400 audit(1696277452.923:1381): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.965266 kernel: audit: type=1400 audit(1696277452.923:1382): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.923000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.981431 kernel: audit: type=1400 audit(1696277452.924:1383): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.924000 audit: BPF prog-id=132 op=LOAD Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:52.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333430326461393165393837646166316332323236303065323937 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:52.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333430326461393165393837646166316332323236303065323937 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.928000 audit: BPF prog-id=133 op=LOAD Oct 2 20:10:52.928000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003446f0 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:52.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333430326461393165393837646166316332323236303065323937 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.929000 audit: BPF prog-id=134 op=LOAD Oct 2 20:10:52.929000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000344738 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:52.929000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333430326461393165393837646166316332323236303065323937 Oct 2 20:10:52.939000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:10:52.939000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { perfmon } for pid=3833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit[3833]: AVC avc: denied { bpf } for pid=3833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:52.939000 audit: BPF prog-id=135 op=LOAD Oct 2 20:10:52.939000 audit[3833]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000344b48 items=0 ppid=3823 pid=3833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:52.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333430326461393165393837646166316332323236303065323937 Oct 2 20:10:52.997849 env[1643]: time="2023-10-02T20:10:52.997798392Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-ngx9z,Uid:d2572e17-1e33-4515-a03e-715d339df04c,Namespace:kube-system,Attempt:0,} returns sandbox id \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\"" Oct 2 20:10:53.002157 env[1643]: time="2023-10-02T20:10:53.002111253Z" level=info msg="CreateContainer within sandbox \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:10:53.017742 env[1643]: time="2023-10-02T20:10:53.017687412Z" level=info msg="CreateContainer within sandbox \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\"" Oct 2 20:10:53.020119 env[1643]: time="2023-10-02T20:10:53.018533183Z" level=info msg="StartContainer for \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\"" Oct 2 20:10:53.045293 systemd[1]: Started cri-containerd-2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2.scope. Oct 2 20:10:53.061075 systemd[1]: cri-containerd-2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2.scope: Deactivated successfully. Oct 2 20:10:53.095322 env[1643]: time="2023-10-02T20:10:53.092215466Z" level=info msg="shim disconnected" id=2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2 Oct 2 20:10:53.095322 env[1643]: time="2023-10-02T20:10:53.092355074Z" level=warning msg="cleaning up after shim disconnected" id=2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2 namespace=k8s.io Oct 2 20:10:53.095322 env[1643]: time="2023-10-02T20:10:53.092370306Z" level=info msg="cleaning up dead shim" Oct 2 20:10:53.105081 env[1643]: time="2023-10-02T20:10:53.105019410Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3882 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:53.105417 env[1643]: time="2023-10-02T20:10:53.105338902Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 20:10:53.109395 env[1643]: time="2023-10-02T20:10:53.109301238Z" level=error msg="Failed to pipe stderr of container \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\"" error="reading from a closed fifo" Oct 2 20:10:53.109395 env[1643]: time="2023-10-02T20:10:53.109303616Z" level=error msg="Failed to pipe stdout of container \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\"" error="reading from a closed fifo" Oct 2 20:10:53.111984 env[1643]: time="2023-10-02T20:10:53.111928209Z" level=error msg="StartContainer for \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:53.112328 kubelet[2700]: E1002 20:10:53.112301 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2" Oct 2 20:10:53.114262 kubelet[2700]: E1002 20:10:53.113956 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:53.114262 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:53.114262 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:10:53.114262 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-57l6z,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-ngx9z_kube-system(d2572e17-1e33-4515-a03e-715d339df04c): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:53.114744 kubelet[2700]: E1002 20:10:53.114072 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-ngx9z" podUID=d2572e17-1e33-4515-a03e-715d339df04c Oct 2 20:10:53.707995 env[1643]: time="2023-10-02T20:10:53.707752396Z" level=info msg="StopPodSandbox for \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\"" Oct 2 20:10:53.708411 env[1643]: time="2023-10-02T20:10:53.708381476Z" level=info msg="Container to stop \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:53.714201 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811-shm.mount: Deactivated successfully. Oct 2 20:10:53.732472 systemd[1]: cri-containerd-493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811.scope: Deactivated successfully. Oct 2 20:10:53.731000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:10:53.734000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:10:53.769517 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811-rootfs.mount: Deactivated successfully. Oct 2 20:10:53.780775 env[1643]: time="2023-10-02T20:10:53.780719072Z" level=info msg="shim disconnected" id=493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811 Oct 2 20:10:53.781676 env[1643]: time="2023-10-02T20:10:53.781613709Z" level=warning msg="cleaning up after shim disconnected" id=493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811 namespace=k8s.io Oct 2 20:10:53.781888 env[1643]: time="2023-10-02T20:10:53.781867336Z" level=info msg="cleaning up dead shim" Oct 2 20:10:53.808357 env[1643]: time="2023-10-02T20:10:53.808311139Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3914 runtime=io.containerd.runc.v2\n" Oct 2 20:10:53.808901 env[1643]: time="2023-10-02T20:10:53.808865918Z" level=info msg="TearDown network for sandbox \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" successfully" Oct 2 20:10:53.808901 env[1643]: time="2023-10-02T20:10:53.808899976Z" level=info msg="StopPodSandbox for \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" returns successfully" Oct 2 20:10:53.967089 kubelet[2700]: I1002 20:10:53.966963 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-xtables-lock\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.967089 kubelet[2700]: I1002 20:10:53.967026 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d2572e17-1e33-4515-a03e-715d339df04c-clustermesh-secrets\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.967089 kubelet[2700]: I1002 20:10:53.967052 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-run\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.967937 kubelet[2700]: I1002 20:10:53.967857 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-bpf-maps\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968057 kubelet[2700]: I1002 20:10:53.967952 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-cgroup\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968057 kubelet[2700]: I1002 20:10:53.967980 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-kernel\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968057 kubelet[2700]: I1002 20:10:53.968027 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-57l6z\" (UniqueName: \"kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968200 kubelet[2700]: I1002 20:10:53.968060 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-net\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968200 kubelet[2700]: I1002 20:10:53.968089 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-etc-cni-netd\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968200 kubelet[2700]: I1002 20:10:53.968117 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-lib-modules\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968200 kubelet[2700]: I1002 20:10:53.968147 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-hubble-tls\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968200 kubelet[2700]: I1002 20:10:53.968182 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d2572e17-1e33-4515-a03e-715d339df04c-cilium-config-path\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968445 kubelet[2700]: I1002 20:10:53.968209 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-hostproc\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968445 kubelet[2700]: I1002 20:10:53.968257 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cni-path\") pod \"d2572e17-1e33-4515-a03e-715d339df04c\" (UID: \"d2572e17-1e33-4515-a03e-715d339df04c\") " Oct 2 20:10:53.968445 kubelet[2700]: I1002 20:10:53.968315 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cni-path" (OuterVolumeSpecName: "cni-path") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.968445 kubelet[2700]: I1002 20:10:53.968349 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.968445 kubelet[2700]: I1002 20:10:53.968370 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.968781 kubelet[2700]: I1002 20:10:53.968391 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.968781 kubelet[2700]: I1002 20:10:53.968412 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.968897 kubelet[2700]: I1002 20:10:53.968775 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.968897 kubelet[2700]: I1002 20:10:53.968810 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.968897 kubelet[2700]: I1002 20:10:53.968832 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.971478 kubelet[2700]: W1002 20:10:53.969136 2700 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/d2572e17-1e33-4515-a03e-715d339df04c/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:53.971478 kubelet[2700]: I1002 20:10:53.971236 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.972311 kubelet[2700]: I1002 20:10:53.972281 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d2572e17-1e33-4515-a03e-715d339df04c-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:53.972406 kubelet[2700]: I1002 20:10:53.972334 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-hostproc" (OuterVolumeSpecName: "hostproc") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:53.986643 kubelet[2700]: I1002 20:10:53.981371 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z" (OuterVolumeSpecName: "kube-api-access-57l6z") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "kube-api-access-57l6z". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:53.986643 kubelet[2700]: I1002 20:10:53.984862 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:53.981618 systemd[1]: var-lib-kubelet-pods-d2572e17\x2d1e33\x2d4515\x2da03e\x2d715d339df04c-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:10:53.984937 systemd[1]: var-lib-kubelet-pods-d2572e17\x2d1e33\x2d4515\x2da03e\x2d715d339df04c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d57l6z.mount: Deactivated successfully. Oct 2 20:10:53.987830 kubelet[2700]: I1002 20:10:53.987572 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d2572e17-1e33-4515-a03e-715d339df04c-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "d2572e17-1e33-4515-a03e-715d339df04c" (UID: "d2572e17-1e33-4515-a03e-715d339df04c"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:10:54.068704 kubelet[2700]: I1002 20:10:54.068667 2700 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-bpf-maps\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.068951 kubelet[2700]: I1002 20:10:54.068934 2700 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-xtables-lock\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069048 kubelet[2700]: I1002 20:10:54.069038 2700 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d2572e17-1e33-4515-a03e-715d339df04c-clustermesh-secrets\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069135 kubelet[2700]: I1002 20:10:54.069126 2700 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-run\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069240 kubelet[2700]: I1002 20:10:54.069211 2700 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cilium-cgroup\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069311 kubelet[2700]: I1002 20:10:54.069265 2700 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-kernel\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069311 kubelet[2700]: I1002 20:10:54.069294 2700 reconciler.go:399] "Volume detached for volume \"kube-api-access-57l6z\" (UniqueName: \"kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-kube-api-access-57l6z\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069311 kubelet[2700]: I1002 20:10:54.069310 2700 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-host-proc-sys-net\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069763 kubelet[2700]: I1002 20:10:54.069325 2700 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-etc-cni-netd\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069763 kubelet[2700]: I1002 20:10:54.069342 2700 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-lib-modules\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069763 kubelet[2700]: I1002 20:10:54.069358 2700 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d2572e17-1e33-4515-a03e-715d339df04c-hubble-tls\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069763 kubelet[2700]: I1002 20:10:54.069372 2700 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-hostproc\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069763 kubelet[2700]: I1002 20:10:54.069389 2700 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d2572e17-1e33-4515-a03e-715d339df04c-cilium-config-path\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.069763 kubelet[2700]: I1002 20:10:54.069402 2700 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d2572e17-1e33-4515-a03e-715d339df04c-cni-path\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:10:54.683781 systemd[1]: var-lib-kubelet-pods-d2572e17\x2d1e33\x2d4515\x2da03e\x2d715d339df04c-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:10:54.711066 kubelet[2700]: I1002 20:10:54.710956 2700 scope.go:115] "RemoveContainer" containerID="2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2" Oct 2 20:10:54.715839 systemd[1]: Removed slice kubepods-burstable-podd2572e17_1e33_4515_a03e_715d339df04c.slice. Oct 2 20:10:54.717359 env[1643]: time="2023-10-02T20:10:54.717314732Z" level=info msg="RemoveContainer for \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\"" Oct 2 20:10:54.722254 env[1643]: time="2023-10-02T20:10:54.722192153Z" level=info msg="RemoveContainer for \"2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2\" returns successfully" Oct 2 20:10:54.734773 kubelet[2700]: I1002 20:10:54.734735 2700 topology_manager.go:205] "Topology Admit Handler" Oct 2 20:10:54.734952 kubelet[2700]: E1002 20:10:54.734803 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="a1541803-0bba-4426-acd5-88aee8638d56" containerName="cilium-operator" Oct 2 20:10:54.734952 kubelet[2700]: E1002 20:10:54.734820 2700 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="d2572e17-1e33-4515-a03e-715d339df04c" containerName="mount-cgroup" Oct 2 20:10:54.734952 kubelet[2700]: I1002 20:10:54.734849 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="d2572e17-1e33-4515-a03e-715d339df04c" containerName="mount-cgroup" Oct 2 20:10:54.734952 kubelet[2700]: I1002 20:10:54.734858 2700 memory_manager.go:345] "RemoveStaleState removing state" podUID="a1541803-0bba-4426-acd5-88aee8638d56" containerName="cilium-operator" Oct 2 20:10:54.751202 systemd[1]: Created slice kubepods-burstable-pod8787c66a_8cc0_451c_85cf_2b8bcf1a5faa.slice. Oct 2 20:10:54.874591 kubelet[2700]: I1002 20:10:54.873817 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-ipsec-secrets\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.874791 kubelet[2700]: I1002 20:10:54.874641 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-net\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.874791 kubelet[2700]: I1002 20:10:54.874677 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-kernel\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.874791 kubelet[2700]: I1002 20:10:54.874707 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hostproc\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.874791 kubelet[2700]: I1002 20:10:54.874735 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9nwgk\" (UniqueName: \"kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-kube-api-access-9nwgk\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.874791 kubelet[2700]: I1002 20:10:54.874762 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-etc-cni-netd\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.874791 kubelet[2700]: I1002 20:10:54.874794 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-run\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.875794 kubelet[2700]: I1002 20:10:54.875162 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-clustermesh-secrets\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.875794 kubelet[2700]: I1002 20:10:54.875262 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-bpf-maps\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.875794 kubelet[2700]: I1002 20:10:54.875299 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-cgroup\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.875794 kubelet[2700]: I1002 20:10:54.875327 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cni-path\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.875794 kubelet[2700]: I1002 20:10:54.875391 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-config-path\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.875794 kubelet[2700]: I1002 20:10:54.875430 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-xtables-lock\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.876028 kubelet[2700]: I1002 20:10:54.875460 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hubble-tls\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.876028 kubelet[2700]: I1002 20:10:54.875491 2700 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-lib-modules\") pod \"cilium-v92j6\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " pod="kube-system/cilium-v92j6" Oct 2 20:10:54.959814 kubelet[2700]: I1002 20:10:54.959708 2700 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=d2572e17-1e33-4515-a03e-715d339df04c path="/var/lib/kubelet/pods/d2572e17-1e33-4515-a03e-715d339df04c/volumes" Oct 2 20:10:55.055453 env[1643]: time="2023-10-02T20:10:55.055402564Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-v92j6,Uid:8787c66a-8cc0-451c-85cf-2b8bcf1a5faa,Namespace:kube-system,Attempt:0,}" Oct 2 20:10:55.077514 env[1643]: time="2023-10-02T20:10:55.077005256Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:10:55.077514 env[1643]: time="2023-10-02T20:10:55.077295529Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:10:55.077514 env[1643]: time="2023-10-02T20:10:55.077316664Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:10:55.078046 env[1643]: time="2023-10-02T20:10:55.077569529Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7 pid=3942 runtime=io.containerd.runc.v2 Oct 2 20:10:55.110014 systemd[1]: Started cri-containerd-efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7.scope. Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.131000 audit: BPF prog-id=136 op=LOAD Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00023dc48 a2=10 a3=1c items=0 ppid=3942 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:55.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623864653735626338376235383462366334393764663932613266 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00023d6b0 a2=3c a3=c items=0 ppid=3942 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:55.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623864653735626338376235383462366334393764663932613266 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit: BPF prog-id=137 op=LOAD Oct 2 20:10:55.133000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023d9d8 a2=78 a3=c0002d97c0 items=0 ppid=3942 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:55.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623864653735626338376235383462366334393764663932613266 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit: BPF prog-id=138 op=LOAD Oct 2 20:10:55.133000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00023d770 a2=78 a3=c0002d9808 items=0 ppid=3942 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:55.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623864653735626338376235383462366334393764663932613266 Oct 2 20:10:55.133000 audit: BPF prog-id=138 op=UNLOAD Oct 2 20:10:55.133000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:55.133000 audit: BPF prog-id=139 op=LOAD Oct 2 20:10:55.133000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00023dc30 a2=78 a3=c0002d9c18 items=0 ppid=3942 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:55.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566623864653735626338376235383462366334393764663932613266 Oct 2 20:10:55.161681 env[1643]: time="2023-10-02T20:10:55.161636436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-v92j6,Uid:8787c66a-8cc0-451c-85cf-2b8bcf1a5faa,Namespace:kube-system,Attempt:0,} returns sandbox id \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\"" Oct 2 20:10:55.167562 env[1643]: time="2023-10-02T20:10:55.167153720Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:10:55.192974 env[1643]: time="2023-10-02T20:10:55.192930089Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\"" Oct 2 20:10:55.194791 env[1643]: time="2023-10-02T20:10:55.194738115Z" level=info msg="StartContainer for \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\"" Oct 2 20:10:55.230763 systemd[1]: Started cri-containerd-37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3.scope. Oct 2 20:10:55.256778 systemd[1]: cri-containerd-37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3.scope: Deactivated successfully. Oct 2 20:10:55.293672 env[1643]: time="2023-10-02T20:10:55.293609473Z" level=info msg="shim disconnected" id=37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3 Oct 2 20:10:55.293672 env[1643]: time="2023-10-02T20:10:55.293672361Z" level=warning msg="cleaning up after shim disconnected" id=37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3 namespace=k8s.io Oct 2 20:10:55.294082 env[1643]: time="2023-10-02T20:10:55.293685150Z" level=info msg="cleaning up dead shim" Oct 2 20:10:55.305482 env[1643]: time="2023-10-02T20:10:55.305364218Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3999 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:55.305998 env[1643]: time="2023-10-02T20:10:55.305934836Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 20:10:55.306434 env[1643]: time="2023-10-02T20:10:55.306271253Z" level=error msg="Failed to pipe stdout of container \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\"" error="reading from a closed fifo" Oct 2 20:10:55.306580 env[1643]: time="2023-10-02T20:10:55.306301650Z" level=error msg="Failed to pipe stderr of container \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\"" error="reading from a closed fifo" Oct 2 20:10:55.308585 env[1643]: time="2023-10-02T20:10:55.308544189Z" level=error msg="StartContainer for \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:55.308849 kubelet[2700]: E1002 20:10:55.308826 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3" Oct 2 20:10:55.308977 kubelet[2700]: E1002 20:10:55.308958 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:55.308977 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:55.308977 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:10:55.308977 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9nwgk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:55.309347 kubelet[2700]: E1002 20:10:55.309007 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:10:55.717535 env[1643]: time="2023-10-02T20:10:55.717486916Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:10:55.734373 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1386237676.mount: Deactivated successfully. Oct 2 20:10:55.744963 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2990827113.mount: Deactivated successfully. Oct 2 20:10:55.748420 env[1643]: time="2023-10-02T20:10:55.748368431Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\"" Oct 2 20:10:55.750141 env[1643]: time="2023-10-02T20:10:55.750099960Z" level=info msg="StartContainer for \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\"" Oct 2 20:10:55.778926 systemd[1]: Started cri-containerd-146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6.scope. Oct 2 20:10:55.794061 systemd[1]: cri-containerd-146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6.scope: Deactivated successfully. Oct 2 20:10:55.818413 env[1643]: time="2023-10-02T20:10:55.818346025Z" level=info msg="shim disconnected" id=146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6 Oct 2 20:10:55.818413 env[1643]: time="2023-10-02T20:10:55.818413451Z" level=warning msg="cleaning up after shim disconnected" id=146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6 namespace=k8s.io Oct 2 20:10:55.818855 env[1643]: time="2023-10-02T20:10:55.818427790Z" level=info msg="cleaning up dead shim" Oct 2 20:10:55.837534 env[1643]: time="2023-10-02T20:10:55.837479974Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:55Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4035 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:55Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:55.837827 env[1643]: time="2023-10-02T20:10:55.837762444Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 20:10:55.838070 env[1643]: time="2023-10-02T20:10:55.838033367Z" level=error msg="Failed to pipe stderr of container \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\"" error="reading from a closed fifo" Oct 2 20:10:55.848681 env[1643]: time="2023-10-02T20:10:55.848602793Z" level=error msg="Failed to pipe stdout of container \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\"" error="reading from a closed fifo" Oct 2 20:10:55.851144 env[1643]: time="2023-10-02T20:10:55.851083339Z" level=error msg="StartContainer for \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:55.851381 kubelet[2700]: E1002 20:10:55.851353 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6" Oct 2 20:10:55.851826 kubelet[2700]: E1002 20:10:55.851479 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:55.851826 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:55.851826 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:10:55.851826 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9nwgk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:55.852197 kubelet[2700]: E1002 20:10:55.851531 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:10:56.205033 kubelet[2700]: W1002 20:10:56.204984 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd2572e17_1e33_4515_a03e_715d339df04c.slice/cri-containerd-2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2.scope WatchSource:0}: container "2fa72206cc6c1c706887b46e3f2bddc400d859139b10970e0c372bc02f3928e2" in namespace "k8s.io": not found Oct 2 20:10:56.725165 kubelet[2700]: I1002 20:10:56.725130 2700 scope.go:115] "RemoveContainer" containerID="37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3" Oct 2 20:10:56.733847 kubelet[2700]: I1002 20:10:56.730292 2700 scope.go:115] "RemoveContainer" containerID="37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3" Oct 2 20:10:56.735849 env[1643]: time="2023-10-02T20:10:56.735809026Z" level=info msg="RemoveContainer for \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\"" Oct 2 20:10:56.736799 env[1643]: time="2023-10-02T20:10:56.736768765Z" level=info msg="RemoveContainer for \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\"" Oct 2 20:10:56.737071 env[1643]: time="2023-10-02T20:10:56.737037396Z" level=error msg="RemoveContainer for \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\" failed" error="failed to set removing state for container \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\": container is already in removing state" Oct 2 20:10:56.737463 kubelet[2700]: E1002 20:10:56.737447 2700 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\": container is already in removing state" containerID="37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3" Oct 2 20:10:56.743966 kubelet[2700]: I1002 20:10:56.737549 2700 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3} err="rpc error: code = Unknown desc = failed to set removing state for container \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\": container is already in removing state" Oct 2 20:10:56.748201 env[1643]: time="2023-10-02T20:10:56.748143283Z" level=info msg="RemoveContainer for \"37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3\" returns successfully" Oct 2 20:10:56.755262 kubelet[2700]: E1002 20:10:56.749548 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa)\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:10:56.970700 kubelet[2700]: E1002 20:10:56.970671 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:57.731599 kubelet[2700]: E1002 20:10:57.731571 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa)\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:10:59.317346 kubelet[2700]: W1002 20:10:59.317287 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8787c66a_8cc0_451c_85cf_2b8bcf1a5faa.slice/cri-containerd-37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3.scope WatchSource:0}: container "37059524477f5b5aaa196f2d426279d4a8002511603201793ca8be1859cc69e3" in namespace "k8s.io": not found Oct 2 20:11:01.972240 kubelet[2700]: E1002 20:11:01.972156 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:02.426759 kubelet[2700]: W1002 20:11:02.426710 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8787c66a_8cc0_451c_85cf_2b8bcf1a5faa.slice/cri-containerd-146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6.scope WatchSource:0}: task 146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6 not found: not found Oct 2 20:11:06.973894 kubelet[2700]: E1002 20:11:06.973861 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:11.975563 kubelet[2700]: E1002 20:11:11.975518 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:12.965238 env[1643]: time="2023-10-02T20:11:12.965176133Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:11:12.993301 env[1643]: time="2023-10-02T20:11:12.993248064Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\"" Oct 2 20:11:12.994718 env[1643]: time="2023-10-02T20:11:12.994603078Z" level=info msg="StartContainer for \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\"" Oct 2 20:11:13.089776 systemd[1]: Started cri-containerd-cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea.scope. Oct 2 20:11:13.106102 systemd[1]: cri-containerd-cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea.scope: Deactivated successfully. Oct 2 20:11:13.124751 env[1643]: time="2023-10-02T20:11:13.124637760Z" level=info msg="shim disconnected" id=cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea Oct 2 20:11:13.124751 env[1643]: time="2023-10-02T20:11:13.124742470Z" level=warning msg="cleaning up after shim disconnected" id=cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea namespace=k8s.io Oct 2 20:11:13.124751 env[1643]: time="2023-10-02T20:11:13.124755355Z" level=info msg="cleaning up dead shim" Oct 2 20:11:13.137597 env[1643]: time="2023-10-02T20:11:13.137535538Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4074 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:13Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:13.137895 env[1643]: time="2023-10-02T20:11:13.137829591Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 20:11:13.138439 env[1643]: time="2023-10-02T20:11:13.138354719Z" level=error msg="Failed to pipe stdout of container \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\"" error="reading from a closed fifo" Oct 2 20:11:13.138439 env[1643]: time="2023-10-02T20:11:13.138358554Z" level=error msg="Failed to pipe stderr of container \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\"" error="reading from a closed fifo" Oct 2 20:11:13.143500 env[1643]: time="2023-10-02T20:11:13.143438077Z" level=error msg="StartContainer for \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:13.150619 kubelet[2700]: E1002 20:11:13.149825 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea" Oct 2 20:11:13.150619 kubelet[2700]: E1002 20:11:13.150101 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:13.150619 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:13.150619 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:11:13.151393 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9nwgk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:13.151501 kubelet[2700]: E1002 20:11:13.150159 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:11:13.785769 kubelet[2700]: I1002 20:11:13.777956 2700 scope.go:115] "RemoveContainer" containerID="146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6" Oct 2 20:11:13.785769 kubelet[2700]: I1002 20:11:13.780606 2700 scope.go:115] "RemoveContainer" containerID="146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6" Oct 2 20:11:13.803057 env[1643]: time="2023-10-02T20:11:13.802686688Z" level=info msg="RemoveContainer for \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\"" Oct 2 20:11:13.808788 env[1643]: time="2023-10-02T20:11:13.808736583Z" level=info msg="RemoveContainer for \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\" returns successfully" Oct 2 20:11:13.810580 env[1643]: time="2023-10-02T20:11:13.810546180Z" level=info msg="RemoveContainer for \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\"" Oct 2 20:11:13.810815 env[1643]: time="2023-10-02T20:11:13.810758509Z" level=info msg="RemoveContainer for \"146093b314e87e3ce6098f590c71f65241b4e13b91dfaf403f8a0184ea0159a6\" returns successfully" Oct 2 20:11:13.814773 kubelet[2700]: E1002 20:11:13.814746 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa)\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:11:13.978087 systemd[1]: run-containerd-runc-k8s.io-cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea-runc.sKvLIe.mount: Deactivated successfully. Oct 2 20:11:13.978235 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea-rootfs.mount: Deactivated successfully. Oct 2 20:11:16.231076 kubelet[2700]: W1002 20:11:16.231027 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8787c66a_8cc0_451c_85cf_2b8bcf1a5faa.slice/cri-containerd-cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea.scope WatchSource:0}: task cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea not found: not found Oct 2 20:11:16.976934 kubelet[2700]: E1002 20:11:16.976904 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:20.412269 kernel: kauditd_printk_skb: 106 callbacks suppressed Oct 2 20:11:20.412450 kernel: audit: type=1400 audit(1696277480.402:1413): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.402000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.402000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.450185 kernel: audit: type=1400 audit(1696277480.402:1412): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.450354 kernel: audit: type=1300 audit(1696277480.402:1413): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000d353c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:20.402000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000d353c0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:20.402000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:20.475398 kernel: audit: type=1327 audit(1696277480.402:1413): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:20.475547 kernel: audit: type=1300 audit(1696277480.402:1412): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000da3b90 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:20.402000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000da3b90 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:20.402000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:20.490168 kernel: audit: type=1327 audit(1696277480.402:1412): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:21.978017 kubelet[2700]: E1002 20:11:21.977987 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:23.101000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.101000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ca8cb40 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:11:23.120088 kernel: audit: type=1400 audit(1696277483.101:1414): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.120299 kernel: audit: type=1300 audit(1696277483.101:1414): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ca8cb40 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:11:23.120335 kernel: audit: type=1327 audit(1696277483.101:1414): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:11:23.101000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:11:23.103000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.140492 kernel: audit: type=1400 audit(1696277483.103:1415): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.103000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00cb1ea20 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:11:23.103000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:11:23.104000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.104000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c0028ece80 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:11:23.104000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:11:23.128000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.128000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c002848d00 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:11:23.128000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:11:23.129000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.129000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00ca8ccc0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:11:23.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:11:23.129000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:23.129000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00ca8ccf0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:11:23.129000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:11:25.957475 kubelet[2700]: E1002 20:11:25.957445 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa)\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:11:26.695583 env[1643]: time="2023-10-02T20:11:26.695541932Z" level=info msg="StopPodSandbox for \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\"" Oct 2 20:11:26.696137 env[1643]: time="2023-10-02T20:11:26.696080127Z" level=info msg="TearDown network for sandbox \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" successfully" Oct 2 20:11:26.696137 env[1643]: time="2023-10-02T20:11:26.696132372Z" level=info msg="StopPodSandbox for \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" returns successfully" Oct 2 20:11:26.696706 env[1643]: time="2023-10-02T20:11:26.696675023Z" level=info msg="RemovePodSandbox for \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\"" Oct 2 20:11:26.696816 env[1643]: time="2023-10-02T20:11:26.696708402Z" level=info msg="Forcibly stopping sandbox \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\"" Oct 2 20:11:26.696816 env[1643]: time="2023-10-02T20:11:26.696793929Z" level=info msg="TearDown network for sandbox \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" successfully" Oct 2 20:11:26.701886 env[1643]: time="2023-10-02T20:11:26.701845946Z" level=info msg="RemovePodSandbox \"69acc0a95c4a946694cf3def5f8251a92131e8d73bf00a8662f0ed94f611a8de\" returns successfully" Oct 2 20:11:26.702398 env[1643]: time="2023-10-02T20:11:26.702368117Z" level=info msg="StopPodSandbox for \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\"" Oct 2 20:11:26.702508 env[1643]: time="2023-10-02T20:11:26.702454909Z" level=info msg="TearDown network for sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" successfully" Oct 2 20:11:26.702508 env[1643]: time="2023-10-02T20:11:26.702498622Z" level=info msg="StopPodSandbox for \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" returns successfully" Oct 2 20:11:26.702812 env[1643]: time="2023-10-02T20:11:26.702784097Z" level=info msg="RemovePodSandbox for \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\"" Oct 2 20:11:26.702896 env[1643]: time="2023-10-02T20:11:26.702815709Z" level=info msg="Forcibly stopping sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\"" Oct 2 20:11:26.702960 env[1643]: time="2023-10-02T20:11:26.702896863Z" level=info msg="TearDown network for sandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" successfully" Oct 2 20:11:26.706825 env[1643]: time="2023-10-02T20:11:26.706789009Z" level=info msg="RemovePodSandbox \"93af349064b4913b689a83d76a2046cbd54050cf75de07ddb6ce91538622c916\" returns successfully" Oct 2 20:11:26.707362 env[1643]: time="2023-10-02T20:11:26.707287244Z" level=info msg="StopPodSandbox for \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\"" Oct 2 20:11:26.707462 env[1643]: time="2023-10-02T20:11:26.707413037Z" level=info msg="TearDown network for sandbox \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" successfully" Oct 2 20:11:26.707516 env[1643]: time="2023-10-02T20:11:26.707459015Z" level=info msg="StopPodSandbox for \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" returns successfully" Oct 2 20:11:26.707882 env[1643]: time="2023-10-02T20:11:26.707860743Z" level=info msg="RemovePodSandbox for \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\"" Oct 2 20:11:26.708006 env[1643]: time="2023-10-02T20:11:26.707964574Z" level=info msg="Forcibly stopping sandbox \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\"" Oct 2 20:11:26.708068 env[1643]: time="2023-10-02T20:11:26.708050819Z" level=info msg="TearDown network for sandbox \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" successfully" Oct 2 20:11:26.711460 env[1643]: time="2023-10-02T20:11:26.711419391Z" level=info msg="RemovePodSandbox \"493402da91e987daf1c222600e297e6dbe7e599a57e07eab87e0387e9f92b811\" returns successfully" Oct 2 20:11:26.979291 kubelet[2700]: E1002 20:11:26.979144 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:27.548000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.550843 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:11:27.550892 kernel: audit: type=1400 audit(1696277487.548:1420): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.548000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00101cc20 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:27.564285 kernel: audit: type=1300 audit(1696277487.548:1420): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00101cc20 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:27.564443 kernel: audit: type=1327 audit(1696277487.548:1420): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:27.548000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:27.552000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.576877 kernel: audit: type=1400 audit(1696277487.552:1421): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.577015 kernel: audit: type=1300 audit(1696277487.552:1421): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00101cd60 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:27.552000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00101cd60 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:27.552000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:27.591209 kernel: audit: type=1327 audit(1696277487.552:1421): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:27.591356 kernel: audit: type=1400 audit(1696277487.563:1422): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.563000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.563000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0012820a0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:27.604303 kernel: audit: type=1300 audit(1696277487.563:1422): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0012820a0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:27.604455 kernel: audit: type=1327 audit(1696277487.563:1422): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:27.563000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:27.571000 audit[2497]: AVC avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.616351 kernel: audit: type=1400 audit(1696277487.571:1423): avc: denied { watch } for pid=2497 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:27.571000 audit[2497]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c00101cda0 a2=fc6 a3=0 items=0 ppid=2379 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:11:27.571000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:31.980204 kubelet[2700]: E1002 20:11:31.980170 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:36.960838 env[1643]: time="2023-10-02T20:11:36.960612073Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:11:36.976206 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3724299815.mount: Deactivated successfully. Oct 2 20:11:36.981038 kubelet[2700]: E1002 20:11:36.981014 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:36.986776 env[1643]: time="2023-10-02T20:11:36.986705722Z" level=info msg="CreateContainer within sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\"" Oct 2 20:11:36.987512 env[1643]: time="2023-10-02T20:11:36.987478646Z" level=info msg="StartContainer for \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\"" Oct 2 20:11:37.047839 systemd[1]: Started cri-containerd-8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36.scope. Oct 2 20:11:37.076259 systemd[1]: cri-containerd-8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36.scope: Deactivated successfully. Oct 2 20:11:37.121668 env[1643]: time="2023-10-02T20:11:37.121609509Z" level=info msg="shim disconnected" id=8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36 Oct 2 20:11:37.121939 env[1643]: time="2023-10-02T20:11:37.121674650Z" level=warning msg="cleaning up after shim disconnected" id=8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36 namespace=k8s.io Oct 2 20:11:37.121939 env[1643]: time="2023-10-02T20:11:37.121688948Z" level=info msg="cleaning up dead shim" Oct 2 20:11:37.132069 env[1643]: time="2023-10-02T20:11:37.132011593Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4117 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:37Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:37.132378 env[1643]: time="2023-10-02T20:11:37.132310900Z" level=error msg="copy shim log" error="read /proc/self/fd/45: file already closed" Oct 2 20:11:37.132662 env[1643]: time="2023-10-02T20:11:37.132612683Z" level=error msg="Failed to pipe stdout of container \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\"" error="reading from a closed fifo" Oct 2 20:11:37.132981 env[1643]: time="2023-10-02T20:11:37.132944404Z" level=error msg="Failed to pipe stderr of container \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\"" error="reading from a closed fifo" Oct 2 20:11:37.138165 env[1643]: time="2023-10-02T20:11:37.138103695Z" level=error msg="StartContainer for \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:37.138397 kubelet[2700]: E1002 20:11:37.138372 2700 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36" Oct 2 20:11:37.138530 kubelet[2700]: E1002 20:11:37.138502 2700 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:37.138530 kubelet[2700]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:37.138530 kubelet[2700]: rm /hostbin/cilium-mount Oct 2 20:11:37.138530 kubelet[2700]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-9nwgk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:37.138747 kubelet[2700]: E1002 20:11:37.138553 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:11:37.833908 kubelet[2700]: I1002 20:11:37.833879 2700 scope.go:115] "RemoveContainer" containerID="cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea" Oct 2 20:11:37.834257 kubelet[2700]: I1002 20:11:37.834241 2700 scope.go:115] "RemoveContainer" containerID="cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea" Oct 2 20:11:37.836504 env[1643]: time="2023-10-02T20:11:37.836463703Z" level=info msg="RemoveContainer for \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\"" Oct 2 20:11:37.837775 env[1643]: time="2023-10-02T20:11:37.837737880Z" level=info msg="RemoveContainer for \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\"" Oct 2 20:11:37.837952 env[1643]: time="2023-10-02T20:11:37.837890194Z" level=error msg="RemoveContainer for \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\" failed" error="failed to set removing state for container \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\": container is already in removing state" Oct 2 20:11:37.838362 kubelet[2700]: E1002 20:11:37.838343 2700 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\": container is already in removing state" containerID="cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea" Oct 2 20:11:37.838721 kubelet[2700]: E1002 20:11:37.838697 2700 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea": container is already in removing state; Skipping pod "cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa)" Oct 2 20:11:37.839825 kubelet[2700]: E1002 20:11:37.839699 2700 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-v92j6_kube-system(8787c66a-8cc0-451c-85cf-2b8bcf1a5faa)\"" pod="kube-system/cilium-v92j6" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa Oct 2 20:11:37.842408 env[1643]: time="2023-10-02T20:11:37.841814925Z" level=info msg="RemoveContainer for \"cda161621f9b80f4f1657e8a8d9972e8ee872a2bfeccc8ca13d7ec405cf277ea\" returns successfully" Oct 2 20:11:37.973455 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36-rootfs.mount: Deactivated successfully. Oct 2 20:11:40.229698 kubelet[2700]: W1002 20:11:40.229659 2700 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod8787c66a_8cc0_451c_85cf_2b8bcf1a5faa.slice/cri-containerd-8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36.scope WatchSource:0}: task 8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36 not found: not found Oct 2 20:11:41.982464 kubelet[2700]: E1002 20:11:41.982435 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:46.983264 kubelet[2700]: E1002 20:11:46.983236 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:50.647644 env[1643]: time="2023-10-02T20:11:50.647598749Z" level=info msg="StopPodSandbox for \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\"" Oct 2 20:11:50.648469 env[1643]: time="2023-10-02T20:11:50.648426418Z" level=info msg="Container to stop \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:50.651029 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7-shm.mount: Deactivated successfully. Oct 2 20:11:50.666123 systemd[1]: cri-containerd-efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7.scope: Deactivated successfully. Oct 2 20:11:50.673078 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:11:50.673252 kernel: audit: type=1334 audit(1696277510.665:1424): prog-id=136 op=UNLOAD Oct 2 20:11:50.665000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:11:50.673000 audit: BPF prog-id=139 op=UNLOAD Oct 2 20:11:50.677244 kernel: audit: type=1334 audit(1696277510.673:1425): prog-id=139 op=UNLOAD Oct 2 20:11:50.728536 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7-rootfs.mount: Deactivated successfully. Oct 2 20:11:50.753217 env[1643]: time="2023-10-02T20:11:50.753164600Z" level=info msg="shim disconnected" id=efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7 Oct 2 20:11:50.753693 env[1643]: time="2023-10-02T20:11:50.753667196Z" level=warning msg="cleaning up after shim disconnected" id=efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7 namespace=k8s.io Oct 2 20:11:50.754051 env[1643]: time="2023-10-02T20:11:50.754029838Z" level=info msg="cleaning up dead shim" Oct 2 20:11:50.780248 env[1643]: time="2023-10-02T20:11:50.778419094Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4151 runtime=io.containerd.runc.v2\n" Oct 2 20:11:50.780248 env[1643]: time="2023-10-02T20:11:50.778763856Z" level=info msg="TearDown network for sandbox \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" successfully" Oct 2 20:11:50.780248 env[1643]: time="2023-10-02T20:11:50.778791084Z" level=info msg="StopPodSandbox for \"efb8de75bc87b584b6c497df92a2fecbd37d4b20027d3dcd4abd288394a7eff7\" returns successfully" Oct 2 20:11:50.810215 sshd[3807]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:50.810000 audit[3807]: USER_END pid=3807 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.821297 kernel: audit: type=1106 audit(1696277510.810:1426): pid=3807 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.815086 systemd[1]: sshd@29-172.31.30.99:22-139.178.89.65:54440.service: Deactivated successfully. Oct 2 20:11:50.810000 audit[3807]: CRED_DISP pid=3807 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.816677 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:11:50.817003 systemd[1]: session-30.scope: Consumed 1.276s CPU time. Oct 2 20:11:50.818860 systemd-logind[1631]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:11:50.820499 systemd-logind[1631]: Removed session 30. Oct 2 20:11:50.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.30.99:22-139.178.89.65:54440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.828261 kernel: audit: type=1104 audit(1696277510.810:1427): pid=3807 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.828313 kernel: audit: type=1131 audit(1696277510.810:1428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.30.99:22-139.178.89.65:54440 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.870518 kubelet[2700]: I1002 20:11:50.870414 2700 scope.go:115] "RemoveContainer" containerID="8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36" Oct 2 20:11:50.873636 env[1643]: time="2023-10-02T20:11:50.873597519Z" level=info msg="RemoveContainer for \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\"" Oct 2 20:11:50.878487 kubelet[2700]: I1002 20:11:50.877726 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9nwgk\" (UniqueName: \"kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-kube-api-access-9nwgk\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.878487 kubelet[2700]: I1002 20:11:50.877795 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-run\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.878487 kubelet[2700]: I1002 20:11:50.877837 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-clustermesh-secrets\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.878487 kubelet[2700]: I1002 20:11:50.877882 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-bpf-maps\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.878487 kubelet[2700]: I1002 20:11:50.877916 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hubble-tls\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.878487 kubelet[2700]: I1002 20:11:50.877959 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cni-path\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880420 kubelet[2700]: I1002 20:11:50.877998 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-net\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880420 kubelet[2700]: I1002 20:11:50.878053 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-etc-cni-netd\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880420 kubelet[2700]: I1002 20:11:50.878099 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-kernel\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880420 kubelet[2700]: I1002 20:11:50.878111 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.880420 kubelet[2700]: I1002 20:11:50.878134 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-xtables-lock\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880420 kubelet[2700]: I1002 20:11:50.878183 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-ipsec-secrets\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880742 kubelet[2700]: I1002 20:11:50.878213 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-lib-modules\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880742 kubelet[2700]: I1002 20:11:50.878274 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-config-path\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880742 kubelet[2700]: I1002 20:11:50.878322 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-cgroup\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880742 kubelet[2700]: I1002 20:11:50.878356 2700 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hostproc\") pod \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\" (UID: \"8787c66a-8cc0-451c-85cf-2b8bcf1a5faa\") " Oct 2 20:11:50.880742 kubelet[2700]: I1002 20:11:50.878439 2700 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-bpf-maps\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.880742 kubelet[2700]: I1002 20:11:50.880120 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hostproc" (OuterVolumeSpecName: "hostproc") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.883017 kubelet[2700]: I1002 20:11:50.881555 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cni-path" (OuterVolumeSpecName: "cni-path") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.883017 kubelet[2700]: I1002 20:11:50.881604 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.883017 kubelet[2700]: I1002 20:11:50.881633 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.883017 kubelet[2700]: I1002 20:11:50.881677 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.883017 kubelet[2700]: I1002 20:11:50.881699 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.883483 kubelet[2700]: I1002 20:11:50.881960 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.883483 kubelet[2700]: W1002 20:11:50.882144 2700 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:11:50.886908 kubelet[2700]: I1002 20:11:50.886876 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.888343 kubelet[2700]: I1002 20:11:50.888304 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.891978 systemd[1]: var-lib-kubelet-pods-8787c66a\x2d8cc0\x2d451c\x2d85cf\x2d2b8bcf1a5faa-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9nwgk.mount: Deactivated successfully. Oct 2 20:11:50.894567 env[1643]: time="2023-10-02T20:11:50.894525825Z" level=info msg="RemoveContainer for \"8bca280792c383aac8ecb5c6c4536977eb13885ce52acb4dbca50643a6529f36\" returns successfully" Oct 2 20:11:50.896278 kubelet[2700]: I1002 20:11:50.896216 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-kube-api-access-9nwgk" (OuterVolumeSpecName: "kube-api-access-9nwgk") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "kube-api-access-9nwgk". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:50.899323 kubelet[2700]: I1002 20:11:50.898125 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:50.905420 systemd[1]: var-lib-kubelet-pods-8787c66a\x2d8cc0\x2d451c\x2d85cf\x2d2b8bcf1a5faa-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:50.909430 systemd[1]: var-lib-kubelet-pods-8787c66a\x2d8cc0\x2d451c\x2d85cf\x2d2b8bcf1a5faa-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:11:50.921742 kubelet[2700]: I1002 20:11:50.921700 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:50.921990 kubelet[2700]: I1002 20:11:50.921701 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:50.938782 kubelet[2700]: I1002 20:11:50.938603 2700 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa" (UID: "8787c66a-8cc0-451c-85cf-2b8bcf1a5faa"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:50.969987 systemd[1]: Removed slice kubepods-burstable-pod8787c66a_8cc0_451c_85cf_2b8bcf1a5faa.slice. Oct 2 20:11:50.979273 kubelet[2700]: I1002 20:11:50.979214 2700 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-kernel\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979273 kubelet[2700]: I1002 20:11:50.979274 2700 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-etc-cni-netd\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979288 2700 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-xtables-lock\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979302 2700 reconciler.go:399] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-ipsec-secrets\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979314 2700 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-lib-modules\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979327 2700 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-config-path\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979339 2700 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hostproc\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979351 2700 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-cgroup\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979363 2700 reconciler.go:399] "Volume detached for volume \"kube-api-access-9nwgk\" (UniqueName: \"kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-kube-api-access-9nwgk\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979495 kubelet[2700]: I1002 20:11:50.979375 2700 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cilium-run\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979716 kubelet[2700]: I1002 20:11:50.979387 2700 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-hubble-tls\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979716 kubelet[2700]: I1002 20:11:50.979401 2700 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-clustermesh-secrets\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979716 kubelet[2700]: I1002 20:11:50.979414 2700 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-host-proc-sys-net\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:50.979716 kubelet[2700]: I1002 20:11:50.979426 2700 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa-cni-path\") on node \"ip-172-31-30-99\" DevicePath \"\"" Oct 2 20:11:51.650965 systemd[1]: var-lib-kubelet-pods-8787c66a\x2d8cc0\x2d451c\x2d85cf\x2d2b8bcf1a5faa-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:51.984418 kubelet[2700]: E1002 20:11:51.984307 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:52.959520 kubelet[2700]: I1002 20:11:52.959487 2700 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=8787c66a-8cc0-451c-85cf-2b8bcf1a5faa path="/var/lib/kubelet/pods/8787c66a-8cc0-451c-85cf-2b8bcf1a5faa/volumes" Oct 2 20:11:56.985670 kubelet[2700]: E1002 20:11:56.985638 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:01.986848 kubelet[2700]: E1002 20:12:01.986803 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:03.966000 audit: BPF prog-id=109 op=UNLOAD Oct 2 20:12:03.967527 systemd[1]: cri-containerd-cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8.scope: Deactivated successfully. Oct 2 20:12:03.967863 systemd[1]: cri-containerd-cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8.scope: Consumed 2.325s CPU time. Oct 2 20:12:03.971281 kernel: audit: type=1334 audit(1696277523.966:1429): prog-id=109 op=UNLOAD Oct 2 20:12:03.975000 audit: BPF prog-id=112 op=UNLOAD Oct 2 20:12:03.979258 kernel: audit: type=1334 audit(1696277523.975:1430): prog-id=112 op=UNLOAD Oct 2 20:12:04.052941 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8-rootfs.mount: Deactivated successfully. Oct 2 20:12:04.085458 env[1643]: time="2023-10-02T20:12:04.085146776Z" level=info msg="shim disconnected" id=cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8 Oct 2 20:12:04.086170 env[1643]: time="2023-10-02T20:12:04.085460187Z" level=warning msg="cleaning up after shim disconnected" id=cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8 namespace=k8s.io Oct 2 20:12:04.086170 env[1643]: time="2023-10-02T20:12:04.085481904Z" level=info msg="cleaning up dead shim" Oct 2 20:12:04.100931 env[1643]: time="2023-10-02T20:12:04.100770057Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4182 runtime=io.containerd.runc.v2\n" Oct 2 20:12:04.413344 systemd[1]: cri-containerd-a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce.scope: Deactivated successfully. Oct 2 20:12:04.413761 systemd[1]: cri-containerd-a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce.scope: Consumed 4.605s CPU time. Oct 2 20:12:04.419606 kernel: audit: type=1334 audit(1696277524.414:1431): prog-id=85 op=UNLOAD Oct 2 20:12:04.419754 kernel: audit: type=1334 audit(1696277524.414:1432): prog-id=89 op=UNLOAD Oct 2 20:12:04.414000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:12:04.414000 audit: BPF prog-id=89 op=UNLOAD Oct 2 20:12:04.456627 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce-rootfs.mount: Deactivated successfully. Oct 2 20:12:04.473937 env[1643]: time="2023-10-02T20:12:04.473880081Z" level=info msg="shim disconnected" id=a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce Oct 2 20:12:04.473937 env[1643]: time="2023-10-02T20:12:04.473936212Z" level=warning msg="cleaning up after shim disconnected" id=a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce namespace=k8s.io Oct 2 20:12:04.474293 env[1643]: time="2023-10-02T20:12:04.473949360Z" level=info msg="cleaning up dead shim" Oct 2 20:12:04.487326 env[1643]: time="2023-10-02T20:12:04.487250627Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:12:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4208 runtime=io.containerd.runc.v2\n" Oct 2 20:12:04.901506 kubelet[2700]: I1002 20:12:04.901470 2700 scope.go:115] "RemoveContainer" containerID="a9f2a2f35b4144e45ea22e3f339b7608f3e162c3661f05e83fc40931e02f69ce" Oct 2 20:12:04.906661 kubelet[2700]: I1002 20:12:04.906625 2700 scope.go:115] "RemoveContainer" containerID="cc370587afa4a0b2d1bcb7783b888dce365481e4a51a623631fc76b6aa6c60c8" Oct 2 20:12:04.907764 env[1643]: time="2023-10-02T20:12:04.907723901Z" level=info msg="CreateContainer within sandbox \"d6da6f119bf0f8616ec623014a3cb89eae6198e47e4a4a47400552941002af69\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:12:04.908776 env[1643]: time="2023-10-02T20:12:04.908738086Z" level=info msg="CreateContainer within sandbox \"de28bd01a0e50b3ab97590de764e2bc287c6321e38cc5bf3ad97ee369a240478\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:12:04.930830 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount294969383.mount: Deactivated successfully. Oct 2 20:12:04.941202 env[1643]: time="2023-10-02T20:12:04.941103963Z" level=info msg="CreateContainer within sandbox \"d6da6f119bf0f8616ec623014a3cb89eae6198e47e4a4a47400552941002af69\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"b843e4c309fa442add2233c7c1192456dbc903b022bbd1c6891a1459fc7cd989\"" Oct 2 20:12:04.941871 env[1643]: time="2023-10-02T20:12:04.941829813Z" level=info msg="StartContainer for \"b843e4c309fa442add2233c7c1192456dbc903b022bbd1c6891a1459fc7cd989\"" Oct 2 20:12:04.942515 env[1643]: time="2023-10-02T20:12:04.942481791Z" level=info msg="CreateContainer within sandbox \"de28bd01a0e50b3ab97590de764e2bc287c6321e38cc5bf3ad97ee369a240478\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"f54a7fe45ff1a97013cd90b62529b12ff214e32e52d6a7b0f92e024a2eedb28b\"" Oct 2 20:12:04.943809 env[1643]: time="2023-10-02T20:12:04.943783131Z" level=info msg="StartContainer for \"f54a7fe45ff1a97013cd90b62529b12ff214e32e52d6a7b0f92e024a2eedb28b\"" Oct 2 20:12:04.969684 systemd[1]: Started cri-containerd-b843e4c309fa442add2233c7c1192456dbc903b022bbd1c6891a1459fc7cd989.scope. Oct 2 20:12:04.980873 systemd[1]: Started cri-containerd-f54a7fe45ff1a97013cd90b62529b12ff214e32e52d6a7b0f92e024a2eedb28b.scope. Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022428 kernel: audit: type=1400 audit(1696277525.015:1433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.029531 kernel: audit: type=1400 audit(1696277525.015:1434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.036494 kernel: audit: type=1400 audit(1696277525.015:1435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.036605 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:12:05.042458 kernel: audit: type=1400 audit(1696277525.015:1436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.042866 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.020000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.020000 audit: BPF prog-id=140 op=LOAD Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2379 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238343365346333303966613434326164643232333363376331313932 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2379 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238343365346333303966613434326164643232333363376331313932 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit: BPF prog-id=141 op=LOAD Oct 2 20:12:05.021000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000318610 items=0 ppid=2379 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238343365346333303966613434326164643232333363376331313932 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.021000 audit: BPF prog-id=142 op=LOAD Oct 2 20:12:05.021000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000318658 items=0 ppid=2379 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238343365346333303966613434326164643232333363376331313932 Oct 2 20:12:05.022000 audit: BPF prog-id=142 op=UNLOAD Oct 2 20:12:05.022000 audit: BPF prog-id=141 op=UNLOAD Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.022000 audit: BPF prog-id=143 op=LOAD Oct 2 20:12:05.022000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000318a68 items=0 ppid=2379 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.022000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238343365346333303966613434326164643232333363376331313932 Oct 2 20:12:05.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.043000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.043000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.044000 audit: BPF prog-id=144 op=LOAD Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2767 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635346137666534356666316139373031336364393062363235323962 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2767 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635346137666534356666316139373031336364393062363235323962 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.045000 audit: BPF prog-id=145 op=LOAD Oct 2 20:12:05.045000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002e0b60 items=0 ppid=2767 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635346137666534356666316139373031336364393062363235323962 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit: BPF prog-id=146 op=LOAD Oct 2 20:12:05.047000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002e0ba8 items=0 ppid=2767 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635346137666534356666316139373031336364393062363235323962 Oct 2 20:12:05.047000 audit: BPF prog-id=146 op=UNLOAD Oct 2 20:12:05.047000 audit: BPF prog-id=145 op=UNLOAD Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { perfmon } for pid=4236 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit[4236]: AVC avc: denied { bpf } for pid=4236 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:12:05.047000 audit: BPF prog-id=147 op=LOAD Oct 2 20:12:05.047000 audit[4236]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002e0fb8 items=0 ppid=2767 pid=4236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:12:05.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635346137666534356666316139373031336364393062363235323962 Oct 2 20:12:05.133639 env[1643]: time="2023-10-02T20:12:05.133595143Z" level=info msg="StartContainer for \"b843e4c309fa442add2233c7c1192456dbc903b022bbd1c6891a1459fc7cd989\" returns successfully" Oct 2 20:12:05.135904 env[1643]: time="2023-10-02T20:12:05.135865473Z" level=info msg="StartContainer for \"f54a7fe45ff1a97013cd90b62529b12ff214e32e52d6a7b0f92e024a2eedb28b\" returns successfully" Oct 2 20:12:06.987970 kubelet[2700]: E1002 20:12:06.987947 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:07.334000 audit[4255]: AVC avc: denied { watch } for pid=4255 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:07.334000 audit[4255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000134ab0 a2=fc6 a3=0 items=0 ppid=2379 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:12:07.334000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:07.335000 audit[4255]: AVC avc: denied { watch } for pid=4255 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:07.335000 audit[4255]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0001f2060 a2=fc6 a3=0 items=0 ppid=2379 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c380 key=(null) Oct 2 20:12:07.335000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:12:11.989901 kubelet[2700]: E1002 20:12:11.989861 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:12.183215 kubelet[2700]: E1002 20:12:12.183153 2700 controller.go:187] failed to update lease, error: Put "https://172.31.30.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-99?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 20:12:14.183240 kubelet[2700]: E1002 20:12:14.183195 2700 request.go:1076] Unexpected error when reading response body: net/http: request canceled (Client.Timeout or context cancellation while reading body) Oct 2 20:12:14.183715 kubelet[2700]: E1002 20:12:14.183531 2700 kubelet_node_status.go:460] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T20:12:04Z\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T20:12:04Z\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T20:12:04Z\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2023-10-02T20:12:04Z\\\",\\\"type\\\":\\\"Ready\\\"}]}}\" for node \"ip-172-31-30-99\": unexpected error when reading response body. Please retry. Original error: net/http: request canceled (Client.Timeout or context cancellation while reading body)" Oct 2 20:12:16.991442 kubelet[2700]: E1002 20:12:16.991403 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:21.993092 kubelet[2700]: E1002 20:12:21.993057 2700 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:22.183521 kubelet[2700]: E1002 20:12:22.183464 2700 controller.go:187] failed to update lease, error: Put "https://172.31.30.99:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-99?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 20:12:23.102000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.105335 kernel: kauditd_printk_skb: 116 callbacks suppressed Oct 2 20:12:23.105414 kernel: audit: type=1400 audit(1696277543.102:1470): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521251 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.102000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c010ff51a0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.127551 kernel: audit: type=1300 audit(1696277543.102:1470): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c010ff51a0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.127670 kernel: audit: type=1327 audit(1696277543.102:1470): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.104000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.139748 kernel: audit: type=1400 audit(1696277543.104:1471): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.139887 kernel: audit: type=1300 audit(1696277543.104:1471): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00315e060 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.104000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00315e060 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.104000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.152900 kernel: audit: type=1327 audit(1696277543.104:1471): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.153019 kernel: audit: type=1400 audit(1696277543.104:1472): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.104000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.104000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c010ff5200 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.165864 kernel: audit: type=1300 audit(1696277543.104:1472): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c010ff5200 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.165981 kernel: audit: type=1327 audit(1696277543.104:1472): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.104000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.126000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.179792 kernel: audit: type=1400 audit(1696277543.126:1473): avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521257 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.126000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c010ffd020 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.126000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.126000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521255 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.126000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c010ffd050 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.126000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:23.126000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520984 scontext=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:12:23.126000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c002f69ca0 a2=fc6 a3=0 items=0 ppid=2396 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c766,c1021 key=(null) Oct 2 20:12:23.126000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E3939002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 20:12:24.184472 kubelet[2700]: E1002 20:12:24.184432 2700 kubelet_node_status.go:460] "Error updating node status, will retry" err="error getting node \"ip-172-31-30-99\": Get \"https://172.31.30.99:6443/api/v1/nodes/ip-172-31-30-99?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"