Oct 2 18:49:26.174227 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Oct 2 18:49:26.174265 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Oct 2 17:55:37 -00 2023 Oct 2 18:49:26.174287 kernel: efi: EFI v2.70 by EDK II Oct 2 18:49:26.174303 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71accf98 Oct 2 18:49:26.174316 kernel: ACPI: Early table checksum verification disabled Oct 2 18:49:26.174330 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Oct 2 18:49:26.174346 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Oct 2 18:49:26.174360 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 18:49:26.174374 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Oct 2 18:49:26.174387 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 18:49:26.174406 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Oct 2 18:49:26.174419 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Oct 2 18:49:26.174433 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Oct 2 18:49:26.174447 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 18:49:26.174463 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Oct 2 18:49:26.174483 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Oct 2 18:49:26.174497 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Oct 2 18:49:26.174511 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Oct 2 18:49:26.174525 kernel: printk: bootconsole [uart0] enabled Oct 2 18:49:26.174540 kernel: NUMA: Failed to initialise from firmware Oct 2 18:49:26.174554 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 18:49:26.174569 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Oct 2 18:49:26.174583 kernel: Zone ranges: Oct 2 18:49:26.174598 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Oct 2 18:49:26.174612 kernel: DMA32 empty Oct 2 18:49:26.174627 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Oct 2 18:49:26.174645 kernel: Movable zone start for each node Oct 2 18:49:26.174660 kernel: Early memory node ranges Oct 2 18:49:26.174674 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Oct 2 18:49:26.193980 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Oct 2 18:49:26.194009 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Oct 2 18:49:26.194026 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Oct 2 18:49:26.194042 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Oct 2 18:49:26.194057 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Oct 2 18:49:26.194073 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Oct 2 18:49:26.194089 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Oct 2 18:49:26.194105 kernel: psci: probing for conduit method from ACPI. Oct 2 18:49:26.194121 kernel: psci: PSCIv1.0 detected in firmware. Oct 2 18:49:26.194145 kernel: psci: Using standard PSCI v0.2 function IDs Oct 2 18:49:26.194160 kernel: psci: Trusted OS migration not required Oct 2 18:49:26.194181 kernel: psci: SMC Calling Convention v1.1 Oct 2 18:49:26.194198 kernel: ACPI: SRAT not present Oct 2 18:49:26.194215 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Oct 2 18:49:26.194236 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Oct 2 18:49:26.194254 kernel: pcpu-alloc: [0] 0 [0] 1 Oct 2 18:49:26.194269 kernel: Detected PIPT I-cache on CPU0 Oct 2 18:49:26.194285 kernel: CPU features: detected: GIC system register CPU interface Oct 2 18:49:26.194300 kernel: CPU features: detected: Spectre-v2 Oct 2 18:49:26.194316 kernel: CPU features: detected: Spectre-v3a Oct 2 18:49:26.194332 kernel: CPU features: detected: Spectre-BHB Oct 2 18:49:26.194349 kernel: CPU features: kernel page table isolation forced ON by KASLR Oct 2 18:49:26.194366 kernel: CPU features: detected: Kernel page table isolation (KPTI) Oct 2 18:49:26.194382 kernel: CPU features: detected: ARM erratum 1742098 Oct 2 18:49:26.194397 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Oct 2 18:49:26.194416 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Oct 2 18:49:26.194431 kernel: Policy zone: Normal Oct 2 18:49:26.194449 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:49:26.194467 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 18:49:26.194484 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Oct 2 18:49:26.194500 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 18:49:26.194517 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 18:49:26.194533 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Oct 2 18:49:26.194550 kernel: Memory: 3826444K/4030464K available (9792K kernel code, 2092K rwdata, 7548K rodata, 34560K init, 779K bss, 204020K reserved, 0K cma-reserved) Oct 2 18:49:26.194567 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 18:49:26.194587 kernel: trace event string verifier disabled Oct 2 18:49:26.194604 kernel: rcu: Preemptible hierarchical RCU implementation. Oct 2 18:49:26.194621 kernel: rcu: RCU event tracing is enabled. Oct 2 18:49:26.194636 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 18:49:26.194652 kernel: Trampoline variant of Tasks RCU enabled. Oct 2 18:49:26.194669 kernel: Tracing variant of Tasks RCU enabled. Oct 2 18:49:26.194703 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 18:49:26.194723 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 18:49:26.194740 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Oct 2 18:49:26.194757 kernel: GICv3: 96 SPIs implemented Oct 2 18:49:26.194773 kernel: GICv3: 0 Extended SPIs implemented Oct 2 18:49:26.194789 kernel: GICv3: Distributor has no Range Selector support Oct 2 18:49:26.194811 kernel: Root IRQ handler: gic_handle_irq Oct 2 18:49:26.194827 kernel: GICv3: 16 PPIs implemented Oct 2 18:49:26.194843 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Oct 2 18:49:26.194859 kernel: ACPI: SRAT not present Oct 2 18:49:26.194875 kernel: ITS [mem 0x10080000-0x1009ffff] Oct 2 18:49:26.194892 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Oct 2 18:49:26.194908 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Oct 2 18:49:26.194923 kernel: GICv3: using LPI property table @0x00000004000c0000 Oct 2 18:49:26.194939 kernel: ITS: Using hypervisor restricted LPI range [128] Oct 2 18:49:26.194956 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Oct 2 18:49:26.194973 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Oct 2 18:49:26.194993 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Oct 2 18:49:26.195009 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Oct 2 18:49:26.195026 kernel: Console: colour dummy device 80x25 Oct 2 18:49:26.195042 kernel: printk: console [tty1] enabled Oct 2 18:49:26.195059 kernel: ACPI: Core revision 20210730 Oct 2 18:49:26.195076 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Oct 2 18:49:26.195092 kernel: pid_max: default: 32768 minimum: 301 Oct 2 18:49:26.195108 kernel: LSM: Security Framework initializing Oct 2 18:49:26.195123 kernel: SELinux: Initializing. Oct 2 18:49:26.195139 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:49:26.195159 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Oct 2 18:49:26.195174 kernel: rcu: Hierarchical SRCU implementation. Oct 2 18:49:26.195190 kernel: Platform MSI: ITS@0x10080000 domain created Oct 2 18:49:26.195205 kernel: PCI/MSI: ITS@0x10080000 domain created Oct 2 18:49:26.195221 kernel: Remapping and enabling EFI services. Oct 2 18:49:26.195236 kernel: smp: Bringing up secondary CPUs ... Oct 2 18:49:26.195252 kernel: Detected PIPT I-cache on CPU1 Oct 2 18:49:26.195268 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Oct 2 18:49:26.195283 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Oct 2 18:49:26.195303 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Oct 2 18:49:26.195318 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 18:49:26.195333 kernel: SMP: Total of 2 processors activated. Oct 2 18:49:26.195349 kernel: CPU features: detected: 32-bit EL0 Support Oct 2 18:49:26.195364 kernel: CPU features: detected: 32-bit EL1 Support Oct 2 18:49:26.195381 kernel: CPU features: detected: CRC32 instructions Oct 2 18:49:26.195398 kernel: CPU: All CPU(s) started at EL1 Oct 2 18:49:26.195415 kernel: alternatives: patching kernel code Oct 2 18:49:26.195431 kernel: devtmpfs: initialized Oct 2 18:49:26.195450 kernel: KASLR disabled due to lack of seed Oct 2 18:49:26.195468 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 18:49:26.195485 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 18:49:26.195512 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 18:49:26.195533 kernel: SMBIOS 3.0.0 present. Oct 2 18:49:26.195549 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Oct 2 18:49:26.195565 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 18:49:26.195581 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Oct 2 18:49:26.195598 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Oct 2 18:49:26.195614 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Oct 2 18:49:26.195629 kernel: audit: initializing netlink subsys (disabled) Oct 2 18:49:26.195646 kernel: audit: type=2000 audit(0.247:1): state=initialized audit_enabled=0 res=1 Oct 2 18:49:26.195665 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 18:49:26.195699 kernel: cpuidle: using governor menu Oct 2 18:49:26.195719 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Oct 2 18:49:26.195735 kernel: ASID allocator initialised with 32768 entries Oct 2 18:49:26.195751 kernel: ACPI: bus type PCI registered Oct 2 18:49:26.195772 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 18:49:26.195789 kernel: Serial: AMBA PL011 UART driver Oct 2 18:49:26.195805 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 18:49:26.195821 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Oct 2 18:49:26.195837 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 18:49:26.195853 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Oct 2 18:49:26.195869 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 18:49:26.195885 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Oct 2 18:49:26.195901 kernel: ACPI: Added _OSI(Module Device) Oct 2 18:49:26.195921 kernel: ACPI: Added _OSI(Processor Device) Oct 2 18:49:26.195937 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 18:49:26.195953 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 18:49:26.195969 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 18:49:26.195985 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 18:49:26.196001 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 18:49:26.196017 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Oct 2 18:49:26.196033 kernel: ACPI: Interpreter enabled Oct 2 18:49:26.196049 kernel: ACPI: Using GIC for interrupt routing Oct 2 18:49:26.196068 kernel: ACPI: MCFG table detected, 1 entries Oct 2 18:49:26.196085 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Oct 2 18:49:26.196513 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Oct 2 18:49:26.196737 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Oct 2 18:49:26.196935 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Oct 2 18:49:26.197126 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Oct 2 18:49:26.197316 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Oct 2 18:49:26.197345 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Oct 2 18:49:26.197362 kernel: acpiphp: Slot [1] registered Oct 2 18:49:26.197379 kernel: acpiphp: Slot [2] registered Oct 2 18:49:26.197395 kernel: acpiphp: Slot [3] registered Oct 2 18:49:26.197411 kernel: acpiphp: Slot [4] registered Oct 2 18:49:26.197427 kernel: acpiphp: Slot [5] registered Oct 2 18:49:26.197442 kernel: acpiphp: Slot [6] registered Oct 2 18:49:26.197458 kernel: acpiphp: Slot [7] registered Oct 2 18:49:26.197474 kernel: acpiphp: Slot [8] registered Oct 2 18:49:26.197494 kernel: acpiphp: Slot [9] registered Oct 2 18:49:26.197510 kernel: acpiphp: Slot [10] registered Oct 2 18:49:26.197526 kernel: acpiphp: Slot [11] registered Oct 2 18:49:26.197542 kernel: acpiphp: Slot [12] registered Oct 2 18:49:26.197558 kernel: acpiphp: Slot [13] registered Oct 2 18:49:26.197574 kernel: acpiphp: Slot [14] registered Oct 2 18:49:26.197590 kernel: acpiphp: Slot [15] registered Oct 2 18:49:26.197606 kernel: acpiphp: Slot [16] registered Oct 2 18:49:26.197622 kernel: acpiphp: Slot [17] registered Oct 2 18:49:26.197638 kernel: acpiphp: Slot [18] registered Oct 2 18:49:26.197658 kernel: acpiphp: Slot [19] registered Oct 2 18:49:26.197673 kernel: acpiphp: Slot [20] registered Oct 2 18:49:26.198974 kernel: acpiphp: Slot [21] registered Oct 2 18:49:26.198992 kernel: acpiphp: Slot [22] registered Oct 2 18:49:26.199009 kernel: acpiphp: Slot [23] registered Oct 2 18:49:26.199025 kernel: acpiphp: Slot [24] registered Oct 2 18:49:26.199041 kernel: acpiphp: Slot [25] registered Oct 2 18:49:26.199057 kernel: acpiphp: Slot [26] registered Oct 2 18:49:26.199072 kernel: acpiphp: Slot [27] registered Oct 2 18:49:26.199095 kernel: acpiphp: Slot [28] registered Oct 2 18:49:26.199111 kernel: acpiphp: Slot [29] registered Oct 2 18:49:26.199126 kernel: acpiphp: Slot [30] registered Oct 2 18:49:26.199142 kernel: acpiphp: Slot [31] registered Oct 2 18:49:26.199158 kernel: PCI host bridge to bus 0000:00 Oct 2 18:49:26.199387 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Oct 2 18:49:26.199564 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Oct 2 18:49:26.199774 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Oct 2 18:49:26.199954 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Oct 2 18:49:26.200168 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Oct 2 18:49:26.200387 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Oct 2 18:49:26.200590 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Oct 2 18:49:26.200838 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 18:49:26.201040 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Oct 2 18:49:26.201237 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 18:49:26.201447 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 18:49:26.201644 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Oct 2 18:49:26.201884 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Oct 2 18:49:26.202086 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Oct 2 18:49:26.202282 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Oct 2 18:49:26.202478 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Oct 2 18:49:26.202700 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Oct 2 18:49:26.202901 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Oct 2 18:49:26.203098 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Oct 2 18:49:26.203298 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Oct 2 18:49:26.203477 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Oct 2 18:49:26.203654 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Oct 2 18:49:26.213311 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Oct 2 18:49:26.213361 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Oct 2 18:49:26.213379 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Oct 2 18:49:26.213396 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Oct 2 18:49:26.213413 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Oct 2 18:49:26.213430 kernel: iommu: Default domain type: Translated Oct 2 18:49:26.213446 kernel: iommu: DMA domain TLB invalidation policy: strict mode Oct 2 18:49:26.213462 kernel: vgaarb: loaded Oct 2 18:49:26.213478 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 18:49:26.213494 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 18:49:26.213516 kernel: PTP clock support registered Oct 2 18:49:26.213532 kernel: Registered efivars operations Oct 2 18:49:26.213549 kernel: clocksource: Switched to clocksource arch_sys_counter Oct 2 18:49:26.213565 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 18:49:26.213581 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 18:49:26.213597 kernel: pnp: PnP ACPI init Oct 2 18:49:26.213864 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Oct 2 18:49:26.213892 kernel: pnp: PnP ACPI: found 1 devices Oct 2 18:49:26.213909 kernel: NET: Registered PF_INET protocol family Oct 2 18:49:26.213931 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Oct 2 18:49:26.213948 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Oct 2 18:49:26.213964 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 18:49:26.213980 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 18:49:26.213996 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Oct 2 18:49:26.214013 kernel: TCP: Hash tables configured (established 32768 bind 32768) Oct 2 18:49:26.214029 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:49:26.214045 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Oct 2 18:49:26.214061 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 18:49:26.214082 kernel: PCI: CLS 0 bytes, default 64 Oct 2 18:49:26.214099 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Oct 2 18:49:26.214115 kernel: kvm [1]: HYP mode not available Oct 2 18:49:26.214131 kernel: Initialise system trusted keyrings Oct 2 18:49:26.214148 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Oct 2 18:49:26.214165 kernel: Key type asymmetric registered Oct 2 18:49:26.214181 kernel: Asymmetric key parser 'x509' registered Oct 2 18:49:26.214197 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 18:49:26.214213 kernel: io scheduler mq-deadline registered Oct 2 18:49:26.214233 kernel: io scheduler kyber registered Oct 2 18:49:26.214249 kernel: io scheduler bfq registered Oct 2 18:49:26.214455 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Oct 2 18:49:26.214481 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Oct 2 18:49:26.214498 kernel: ACPI: button: Power Button [PWRB] Oct 2 18:49:26.214514 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 18:49:26.214531 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Oct 2 18:49:26.214751 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Oct 2 18:49:26.214781 kernel: printk: console [ttyS0] disabled Oct 2 18:49:26.214799 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Oct 2 18:49:26.214816 kernel: printk: console [ttyS0] enabled Oct 2 18:49:26.214832 kernel: printk: bootconsole [uart0] disabled Oct 2 18:49:26.214848 kernel: thunder_xcv, ver 1.0 Oct 2 18:49:26.214864 kernel: thunder_bgx, ver 1.0 Oct 2 18:49:26.214880 kernel: nicpf, ver 1.0 Oct 2 18:49:26.214896 kernel: nicvf, ver 1.0 Oct 2 18:49:26.215099 kernel: rtc-efi rtc-efi.0: registered as rtc0 Oct 2 18:49:26.215310 kernel: rtc-efi rtc-efi.0: setting system clock to 2023-10-02T18:49:25 UTC (1696272565) Oct 2 18:49:26.215334 kernel: hid: raw HID events driver (C) Jiri Kosina Oct 2 18:49:26.215351 kernel: NET: Registered PF_INET6 protocol family Oct 2 18:49:26.215367 kernel: Segment Routing with IPv6 Oct 2 18:49:26.215383 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 18:49:26.215399 kernel: NET: Registered PF_PACKET protocol family Oct 2 18:49:26.215416 kernel: Key type dns_resolver registered Oct 2 18:49:26.215432 kernel: registered taskstats version 1 Oct 2 18:49:26.215452 kernel: Loading compiled-in X.509 certificates Oct 2 18:49:26.215469 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 3a2a38edc68cb70dc60ec0223a6460557b3bb28d' Oct 2 18:49:26.215485 kernel: Key type .fscrypt registered Oct 2 18:49:26.215501 kernel: Key type fscrypt-provisioning registered Oct 2 18:49:26.215517 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 18:49:26.215533 kernel: ima: Allocated hash algorithm: sha1 Oct 2 18:49:26.215549 kernel: ima: No architecture policies found Oct 2 18:49:26.215565 kernel: Freeing unused kernel memory: 34560K Oct 2 18:49:26.215580 kernel: Run /init as init process Oct 2 18:49:26.215600 kernel: with arguments: Oct 2 18:49:26.215616 kernel: /init Oct 2 18:49:26.215632 kernel: with environment: Oct 2 18:49:26.215647 kernel: HOME=/ Oct 2 18:49:26.215663 kernel: TERM=linux Oct 2 18:49:26.215696 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 18:49:26.215721 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:49:26.215743 systemd[1]: Detected virtualization amazon. Oct 2 18:49:26.215767 systemd[1]: Detected architecture arm64. Oct 2 18:49:26.215784 systemd[1]: Running in initrd. Oct 2 18:49:26.215801 systemd[1]: No hostname configured, using default hostname. Oct 2 18:49:26.215818 systemd[1]: Hostname set to . Oct 2 18:49:26.215836 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:49:26.215854 systemd[1]: Queued start job for default target initrd.target. Oct 2 18:49:26.215871 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:49:26.215888 systemd[1]: Reached target cryptsetup.target. Oct 2 18:49:26.215909 systemd[1]: Reached target paths.target. Oct 2 18:49:26.215926 systemd[1]: Reached target slices.target. Oct 2 18:49:26.215943 systemd[1]: Reached target swap.target. Oct 2 18:49:26.215960 systemd[1]: Reached target timers.target. Oct 2 18:49:26.215979 systemd[1]: Listening on iscsid.socket. Oct 2 18:49:26.215996 systemd[1]: Listening on iscsiuio.socket. Oct 2 18:49:26.216014 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 18:49:26.216032 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 18:49:26.216053 systemd[1]: Listening on systemd-journald.socket. Oct 2 18:49:26.216070 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:49:26.216088 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:49:26.216105 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:49:26.216123 systemd[1]: Reached target sockets.target. Oct 2 18:49:26.216140 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:49:26.216158 systemd[1]: Finished network-cleanup.service. Oct 2 18:49:26.216175 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 18:49:26.216192 systemd[1]: Starting systemd-journald.service... Oct 2 18:49:26.216214 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:49:26.216232 systemd[1]: Starting systemd-resolved.service... Oct 2 18:49:26.216249 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 18:49:26.216267 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:49:26.216284 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 18:49:26.216301 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 18:49:26.216319 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 18:49:26.216336 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 18:49:26.216354 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 18:49:26.216376 kernel: audit: type=1130 audit(1696272566.180:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.216393 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 18:49:26.216414 systemd-journald[308]: Journal started Oct 2 18:49:26.216499 systemd-journald[308]: Runtime Journal (/run/log/journal/ec2133ced1e0fe1deb973bdbba6d345b) is 8.0M, max 75.4M, 67.4M free. Oct 2 18:49:26.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.140022 systemd-modules-load[309]: Inserted module 'overlay' Oct 2 18:49:26.222573 systemd[1]: Started systemd-journald.service. Oct 2 18:49:26.222612 kernel: Bridge firewalling registered Oct 2 18:49:26.230340 kernel: audit: type=1130 audit(1696272566.220:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.191947 systemd-resolved[310]: Positive Trust Anchors: Oct 2 18:49:26.191967 systemd-resolved[310]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:49:26.192022 systemd-resolved[310]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:49:26.231309 systemd-modules-load[309]: Inserted module 'br_netfilter' Oct 2 18:49:26.260712 kernel: SCSI subsystem initialized Oct 2 18:49:26.279990 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 18:49:26.280066 kernel: device-mapper: uevent: version 1.0.3 Oct 2 18:49:26.283445 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 18:49:26.280496 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 18:49:26.294372 kernel: audit: type=1130 audit(1696272566.284:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.295731 systemd[1]: Starting dracut-cmdline.service... Oct 2 18:49:26.300865 systemd-modules-load[309]: Inserted module 'dm_multipath' Oct 2 18:49:26.304774 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:49:26.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.318137 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:49:26.321863 kernel: audit: type=1130 audit(1696272566.307:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.358310 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:49:26.369891 kernel: audit: type=1130 audit(1696272566.359:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.375872 dracut-cmdline[325]: dracut-dracut-053 Oct 2 18:49:26.388006 dracut-cmdline[325]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=684fe6a2259d7fb96810743ab87aaaa03d9f185b113bd6990a64d1079e5672ca Oct 2 18:49:26.618712 kernel: Loading iSCSI transport class v2.0-870. Oct 2 18:49:26.632738 kernel: iscsi: registered transport (tcp) Oct 2 18:49:26.659061 kernel: iscsi: registered transport (qla4xxx) Oct 2 18:49:26.659131 kernel: QLogic iSCSI HBA Driver Oct 2 18:49:26.834508 systemd-resolved[310]: Defaulting to hostname 'linux'. Oct 2 18:49:26.836961 kernel: random: crng init done Oct 2 18:49:26.838121 systemd[1]: Started systemd-resolved.service. Oct 2 18:49:26.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.849488 systemd[1]: Reached target nss-lookup.target. Oct 2 18:49:26.852811 kernel: audit: type=1130 audit(1696272566.839:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.906776 systemd[1]: Finished dracut-cmdline.service. Oct 2 18:49:26.931957 kernel: audit: type=1130 audit(1696272566.905:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:26.910079 systemd[1]: Starting dracut-pre-udev.service... Oct 2 18:49:27.008717 kernel: raid6: neonx8 gen() 6257 MB/s Oct 2 18:49:27.026709 kernel: raid6: neonx8 xor() 4538 MB/s Oct 2 18:49:27.044713 kernel: raid6: neonx4 gen() 6550 MB/s Oct 2 18:49:27.062712 kernel: raid6: neonx4 xor() 4659 MB/s Oct 2 18:49:27.080711 kernel: raid6: neonx2 gen() 5800 MB/s Oct 2 18:49:27.098712 kernel: raid6: neonx2 xor() 4398 MB/s Oct 2 18:49:27.116712 kernel: raid6: neonx1 gen() 4505 MB/s Oct 2 18:49:27.134711 kernel: raid6: neonx1 xor() 3591 MB/s Oct 2 18:49:27.152711 kernel: raid6: int64x8 gen() 3437 MB/s Oct 2 18:49:27.170711 kernel: raid6: int64x8 xor() 2050 MB/s Oct 2 18:49:27.188710 kernel: raid6: int64x4 gen() 3865 MB/s Oct 2 18:49:27.206710 kernel: raid6: int64x4 xor() 2161 MB/s Oct 2 18:49:27.224710 kernel: raid6: int64x2 gen() 3628 MB/s Oct 2 18:49:27.242711 kernel: raid6: int64x2 xor() 1922 MB/s Oct 2 18:49:27.260711 kernel: raid6: int64x1 gen() 2772 MB/s Oct 2 18:49:27.280295 kernel: raid6: int64x1 xor() 1438 MB/s Oct 2 18:49:27.280324 kernel: raid6: using algorithm neonx4 gen() 6550 MB/s Oct 2 18:49:27.280353 kernel: raid6: .... xor() 4659 MB/s, rmw enabled Oct 2 18:49:27.282154 kernel: raid6: using neon recovery algorithm Oct 2 18:49:27.300715 kernel: xor: measuring software checksum speed Oct 2 18:49:27.303711 kernel: 8regs : 9332 MB/sec Oct 2 18:49:27.305709 kernel: 32regs : 11110 MB/sec Oct 2 18:49:27.310091 kernel: arm64_neon : 9447 MB/sec Oct 2 18:49:27.310123 kernel: xor: using function: 32regs (11110 MB/sec) Oct 2 18:49:27.399731 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Oct 2 18:49:27.437439 systemd[1]: Finished dracut-pre-udev.service. Oct 2 18:49:27.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:27.439000 audit: BPF prog-id=7 op=LOAD Oct 2 18:49:27.451123 kernel: audit: type=1130 audit(1696272567.437:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:27.451172 kernel: audit: type=1334 audit(1696272567.439:10): prog-id=7 op=LOAD Oct 2 18:49:27.449044 systemd[1]: Starting systemd-udevd.service... Oct 2 18:49:27.446000 audit: BPF prog-id=8 op=LOAD Oct 2 18:49:27.486016 systemd-udevd[507]: Using default interface naming scheme 'v252'. Oct 2 18:49:27.496670 systemd[1]: Started systemd-udevd.service. Oct 2 18:49:27.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:27.499877 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 18:49:27.563895 dracut-pre-trigger[512]: rd.md=0: removing MD RAID activation Oct 2 18:49:27.675286 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 18:49:27.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:27.680083 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:49:27.789809 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:49:27.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:27.913720 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Oct 2 18:49:27.913785 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Oct 2 18:49:27.933798 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 18:49:27.934144 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 18:49:27.944770 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:ea:9e:f9:df:47 Oct 2 18:49:27.950800 (udev-worker)[564]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:27.953571 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Oct 2 18:49:27.953603 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 18:49:27.961737 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 18:49:27.968360 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 18:49:27.968430 kernel: GPT:9289727 != 16777215 Oct 2 18:49:27.968455 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 18:49:27.970609 kernel: GPT:9289727 != 16777215 Oct 2 18:49:27.973139 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 18:49:27.976072 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:49:28.050709 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (575) Oct 2 18:49:28.135441 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 18:49:28.195544 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:49:28.271784 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 18:49:28.291282 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 18:49:28.292261 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 18:49:28.294653 systemd[1]: Starting disk-uuid.service... Oct 2 18:49:28.324710 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:49:28.329176 disk-uuid[671]: Primary Header is updated. Oct 2 18:49:28.329176 disk-uuid[671]: Secondary Entries is updated. Oct 2 18:49:28.329176 disk-uuid[671]: Secondary Header is updated. Oct 2 18:49:29.355711 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 18:49:29.357864 disk-uuid[672]: The operation has completed successfully. Oct 2 18:49:29.633599 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 18:49:29.633854 systemd[1]: Finished disk-uuid.service. Oct 2 18:49:29.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.639861 systemd[1]: Starting verity-setup.service... Oct 2 18:49:29.690547 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Oct 2 18:49:29.786787 systemd[1]: Found device dev-mapper-usr.device. Oct 2 18:49:29.790397 systemd[1]: Mounting sysusr-usr.mount... Oct 2 18:49:29.811440 systemd[1]: Finished verity-setup.service. Oct 2 18:49:29.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.816493 kernel: kauditd_printk_skb: 6 callbacks suppressed Oct 2 18:49:29.816534 kernel: audit: type=1130 audit(1696272569.812:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:29.893447 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 18:49:29.893794 systemd[1]: Mounted sysusr-usr.mount. Oct 2 18:49:29.896892 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 18:49:29.900794 systemd[1]: Starting ignition-setup.service... Oct 2 18:49:29.915453 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 18:49:29.942224 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:49:29.942290 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:49:29.944480 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:49:29.965716 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:49:30.003488 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 18:49:30.047044 systemd[1]: Finished ignition-setup.service. Oct 2 18:49:30.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.051878 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 18:49:30.063713 kernel: audit: type=1130 audit(1696272570.048:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.272339 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 18:49:30.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.281000 audit: BPF prog-id=9 op=LOAD Oct 2 18:49:30.283709 kernel: audit: type=1130 audit(1696272570.274:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.284567 systemd[1]: Starting systemd-networkd.service... Oct 2 18:49:30.289780 kernel: audit: type=1334 audit(1696272570.281:20): prog-id=9 op=LOAD Oct 2 18:49:30.343850 systemd-networkd[1028]: lo: Link UP Oct 2 18:49:30.343872 systemd-networkd[1028]: lo: Gained carrier Oct 2 18:49:30.347450 systemd-networkd[1028]: Enumeration completed Oct 2 18:49:30.363349 kernel: audit: type=1130 audit(1696272570.348:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.347976 systemd-networkd[1028]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:49:30.348124 systemd[1]: Started systemd-networkd.service. Oct 2 18:49:30.350029 systemd[1]: Reached target network.target. Oct 2 18:49:30.360437 systemd[1]: Starting iscsiuio.service... Oct 2 18:49:30.383455 systemd-networkd[1028]: eth0: Link UP Oct 2 18:49:30.385283 systemd-networkd[1028]: eth0: Gained carrier Oct 2 18:49:30.393531 systemd[1]: Started iscsiuio.service. Oct 2 18:49:30.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.405705 kernel: audit: type=1130 audit(1696272570.394:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.406331 systemd[1]: Starting iscsid.service... Oct 2 18:49:30.414898 systemd-networkd[1028]: eth0: DHCPv4 address 172.31.16.86/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 18:49:30.425912 iscsid[1033]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:49:30.425912 iscsid[1033]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 18:49:30.425912 iscsid[1033]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 18:49:30.425912 iscsid[1033]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 18:49:30.425912 iscsid[1033]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 18:49:30.447818 iscsid[1033]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 18:49:30.458568 systemd[1]: Started iscsid.service. Oct 2 18:49:30.468909 kernel: audit: type=1130 audit(1696272570.459:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.468417 systemd[1]: Starting dracut-initqueue.service... Oct 2 18:49:30.511455 systemd[1]: Finished dracut-initqueue.service. Oct 2 18:49:30.522145 kernel: audit: type=1130 audit(1696272570.509:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.514063 systemd[1]: Reached target remote-fs-pre.target. Oct 2 18:49:30.523869 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:49:30.525747 systemd[1]: Reached target remote-fs.target. Oct 2 18:49:30.534909 systemd[1]: Starting dracut-pre-mount.service... Oct 2 18:49:30.567072 systemd[1]: Finished dracut-pre-mount.service. Oct 2 18:49:30.578091 kernel: audit: type=1130 audit(1696272570.567:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.714551 ignition[951]: Ignition 2.14.0 Oct 2 18:49:30.714583 ignition[951]: Stage: fetch-offline Oct 2 18:49:30.715072 ignition[951]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:49:30.717713 ignition[951]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:49:30.735019 ignition[951]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:49:30.737787 ignition[951]: Ignition finished successfully Oct 2 18:49:30.740934 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 18:49:30.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.752710 kernel: audit: type=1130 audit(1696272570.741:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.753447 systemd[1]: Starting ignition-fetch.service... Oct 2 18:49:30.783439 ignition[1052]: Ignition 2.14.0 Oct 2 18:49:30.783468 ignition[1052]: Stage: fetch Oct 2 18:49:30.783858 ignition[1052]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:49:30.783918 ignition[1052]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:49:30.799487 ignition[1052]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:49:30.801908 ignition[1052]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:49:30.810286 ignition[1052]: INFO : PUT result: OK Oct 2 18:49:30.813508 ignition[1052]: DEBUG : parsed url from cmdline: "" Oct 2 18:49:30.813508 ignition[1052]: INFO : no config URL provided Oct 2 18:49:30.813508 ignition[1052]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 18:49:30.819840 ignition[1052]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 18:49:30.819840 ignition[1052]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:49:30.819840 ignition[1052]: INFO : PUT result: OK Oct 2 18:49:30.819840 ignition[1052]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 18:49:30.828438 ignition[1052]: INFO : GET result: OK Oct 2 18:49:30.833259 ignition[1052]: DEBUG : parsing config with SHA512: 8a8519822bbaa810eee031f65ced2bb82616a4d37e40f045704fe08342c3879f498a8621855330ae9b4cc96cc9cdcc1dbc843180df77a50d00b03c8fdd43f475 Oct 2 18:49:30.870820 unknown[1052]: fetched base config from "system" Oct 2 18:49:30.870853 unknown[1052]: fetched base config from "system" Oct 2 18:49:30.870877 unknown[1052]: fetched user config from "aws" Oct 2 18:49:30.877589 ignition[1052]: fetch: fetch complete Oct 2 18:49:30.877620 ignition[1052]: fetch: fetch passed Oct 2 18:49:30.877763 ignition[1052]: Ignition finished successfully Oct 2 18:49:30.884531 systemd[1]: Finished ignition-fetch.service. Oct 2 18:49:30.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.889071 systemd[1]: Starting ignition-kargs.service... Oct 2 18:49:30.919042 ignition[1058]: Ignition 2.14.0 Oct 2 18:49:30.919072 ignition[1058]: Stage: kargs Oct 2 18:49:30.919434 ignition[1058]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:49:30.919492 ignition[1058]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:49:30.934047 ignition[1058]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:49:30.936644 ignition[1058]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:49:30.940388 ignition[1058]: INFO : PUT result: OK Oct 2 18:49:30.945784 ignition[1058]: kargs: kargs passed Oct 2 18:49:30.945889 ignition[1058]: Ignition finished successfully Oct 2 18:49:30.950264 systemd[1]: Finished ignition-kargs.service. Oct 2 18:49:30.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:30.954863 systemd[1]: Starting ignition-disks.service... Oct 2 18:49:30.984498 ignition[1064]: Ignition 2.14.0 Oct 2 18:49:30.985019 ignition[1064]: Stage: disks Oct 2 18:49:30.985380 ignition[1064]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:49:30.985437 ignition[1064]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:49:31.005482 ignition[1064]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:49:31.007953 ignition[1064]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:49:31.011469 ignition[1064]: INFO : PUT result: OK Oct 2 18:49:31.016922 ignition[1064]: disks: disks passed Oct 2 18:49:31.017027 ignition[1064]: Ignition finished successfully Oct 2 18:49:31.021279 systemd[1]: Finished ignition-disks.service. Oct 2 18:49:31.021000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:31.023502 systemd[1]: Reached target initrd-root-device.target. Oct 2 18:49:31.026548 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:49:31.029849 systemd[1]: Reached target local-fs.target. Oct 2 18:49:31.032919 systemd[1]: Reached target sysinit.target. Oct 2 18:49:31.035879 systemd[1]: Reached target basic.target. Oct 2 18:49:31.041566 systemd[1]: Starting systemd-fsck-root.service... Oct 2 18:49:31.097627 systemd-fsck[1072]: ROOT: clean, 603/553520 files, 56011/553472 blocks Oct 2 18:49:31.108059 systemd[1]: Finished systemd-fsck-root.service. Oct 2 18:49:31.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:31.112760 systemd[1]: Mounting sysroot.mount... Oct 2 18:49:31.139723 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 18:49:31.142010 systemd[1]: Mounted sysroot.mount. Oct 2 18:49:31.145179 systemd[1]: Reached target initrd-root-fs.target. Oct 2 18:49:31.159282 systemd[1]: Mounting sysroot-usr.mount... Oct 2 18:49:31.164772 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 18:49:31.166427 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 18:49:31.166484 systemd[1]: Reached target ignition-diskful.target. Oct 2 18:49:31.186810 systemd[1]: Mounted sysroot-usr.mount. Oct 2 18:49:31.201322 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:49:31.205831 systemd[1]: Starting initrd-setup-root.service... Oct 2 18:49:31.244726 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1089) Oct 2 18:49:31.245351 initrd-setup-root[1094]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 18:49:31.255845 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:49:31.256019 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:49:31.256136 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:49:31.266729 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:49:31.269730 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:49:31.289549 initrd-setup-root[1120]: cut: /sysroot/etc/group: No such file or directory Oct 2 18:49:31.307099 initrd-setup-root[1128]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 18:49:31.328209 initrd-setup-root[1136]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 18:49:31.528038 systemd[1]: Finished initrd-setup-root.service. Oct 2 18:49:31.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:31.531954 systemd[1]: Starting ignition-mount.service... Oct 2 18:49:31.541344 systemd[1]: Starting sysroot-boot.service... Oct 2 18:49:31.566849 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 18:49:31.567024 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 18:49:31.608774 systemd[1]: Finished sysroot-boot.service. Oct 2 18:49:31.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:31.617810 ignition[1155]: INFO : Ignition 2.14.0 Oct 2 18:49:31.617810 ignition[1155]: INFO : Stage: mount Oct 2 18:49:31.621232 ignition[1155]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:49:31.621232 ignition[1155]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:49:31.639419 ignition[1155]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:49:31.642531 ignition[1155]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:49:31.645721 ignition[1155]: INFO : PUT result: OK Oct 2 18:49:31.650890 ignition[1155]: INFO : mount: mount passed Oct 2 18:49:31.653995 ignition[1155]: INFO : Ignition finished successfully Oct 2 18:49:31.656947 systemd[1]: Finished ignition-mount.service. Oct 2 18:49:31.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:31.661416 systemd[1]: Starting ignition-files.service... Oct 2 18:49:31.684811 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 18:49:31.708727 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1164) Oct 2 18:49:31.714998 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Oct 2 18:49:31.715042 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 18:49:31.715065 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 18:49:31.724713 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 18:49:31.729314 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 18:49:31.762772 ignition[1183]: INFO : Ignition 2.14.0 Oct 2 18:49:31.762772 ignition[1183]: INFO : Stage: files Oct 2 18:49:31.766340 ignition[1183]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:49:31.766340 ignition[1183]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:49:31.782167 ignition[1183]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:49:31.785197 ignition[1183]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:49:31.788385 ignition[1183]: INFO : PUT result: OK Oct 2 18:49:31.794707 ignition[1183]: DEBUG : files: compiled without relabeling support, skipping Oct 2 18:49:31.799133 ignition[1183]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 18:49:31.801989 ignition[1183]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 18:49:31.845233 ignition[1183]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 18:49:31.848158 ignition[1183]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 18:49:31.850807 ignition[1183]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 18:49:31.849376 unknown[1183]: wrote ssh authorized keys file for user: core Oct 2 18:49:31.856628 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 18:49:31.856628 ignition[1183]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-arm64-v1.1.1.tgz: attempt #1 Oct 2 18:49:32.002865 systemd-networkd[1028]: eth0: Gained IPv6LL Oct 2 18:49:32.189933 ignition[1183]: INFO : GET result: OK Oct 2 18:49:32.667981 ignition[1183]: DEBUG : file matches expected sum of: 6b5df61a53601926e4b5a9174828123d555f592165439f541bc117c68781f41c8bd30dccd52367e406d104df849bcbcfb72d9c4bafda4b045c59ce95d0ca0742 Oct 2 18:49:32.672633 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.1.1.tgz" Oct 2 18:49:32.676514 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.24.2-linux-arm64.tar.gz" Oct 2 18:49:32.680412 ignition[1183]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.24.2/crictl-v1.24.2-linux-arm64.tar.gz: attempt #1 Oct 2 18:49:32.795920 ignition[1183]: INFO : GET result: OK Oct 2 18:49:32.969702 ignition[1183]: DEBUG : file matches expected sum of: ebd055e9b2888624d006decd582db742131ed815d059d529ba21eaf864becca98a84b20a10eec91051b9d837c6855d28d5042bf5e9a454f4540aec6b82d37e96 Oct 2 18:49:32.974900 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.24.2-linux-arm64.tar.gz" Oct 2 18:49:32.974900 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:49:32.974900 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 18:49:32.974900 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 18:49:32.974900 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:49:33.000826 ignition[1183]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1260544469" Oct 2 18:49:33.007845 ignition[1183]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1260544469": device or resource busy Oct 2 18:49:33.007845 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1260544469", trying btrfs: device or resource busy Oct 2 18:49:33.007845 ignition[1183]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1260544469" Oct 2 18:49:33.017847 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1186) Oct 2 18:49:33.017883 ignition[1183]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1260544469" Oct 2 18:49:33.021516 ignition[1183]: INFO : op(3): [started] unmounting "/mnt/oem1260544469" Oct 2 18:49:33.021516 ignition[1183]: INFO : op(3): [finished] unmounting "/mnt/oem1260544469" Oct 2 18:49:33.021516 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 18:49:33.030900 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:49:33.030900 ignition[1183]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/arm64/kubeadm: attempt #1 Oct 2 18:49:33.043376 systemd[1]: mnt-oem1260544469.mount: Deactivated successfully. Oct 2 18:49:33.118197 ignition[1183]: INFO : GET result: OK Oct 2 18:49:34.447492 ignition[1183]: DEBUG : file matches expected sum of: daab8965a4f617d1570d04c031ab4d55fff6aa13a61f0e4045f2338947f9fb0ee3a80fdee57cfe86db885390595460342181e1ec52b89f127ef09c393ae3db7f Oct 2 18:49:34.452948 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 18:49:34.452948 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:49:34.452948 ignition[1183]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/arm64/kubelet: attempt #1 Oct 2 18:49:34.505693 ignition[1183]: INFO : GET result: OK Oct 2 18:49:36.087212 ignition[1183]: DEBUG : file matches expected sum of: 7b872a34d86e8aa75455a62a20f5cf16426de2ae54ffb8e0250fead920838df818201b8512c2f8bf4c939e5b21babab371f3a48803e2e861da9e6f8cdd022324 Oct 2 18:49:36.092798 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 18:49:36.092798 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:49:36.092798 ignition[1183]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.25.10/bin/linux/arm64/kubectl: attempt #1 Oct 2 18:49:36.140528 ignition[1183]: INFO : GET result: OK Oct 2 18:49:36.956385 ignition[1183]: DEBUG : file matches expected sum of: 733208fa18e683adcd80c621d3be1a1ba35340ff656b78c86068b544045d8710ee100d0ff8df3bf55f607b1863d374f634f2d10b2d37e2be90e2b20dd1cc92ab Oct 2 18:49:36.961524 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 18:49:36.961524 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 18:49:36.961524 ignition[1183]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.2/cilium-linux-arm64.tar.gz: attempt #1 Oct 2 18:49:37.047087 ignition[1183]: INFO : GET result: OK Oct 2 18:49:37.169851 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 18:49:37.173941 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 18:49:37.177892 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 18:49:37.181466 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:49:37.185142 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 18:49:37.189022 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 18:49:37.192891 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:49:37.204366 ignition[1183]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2982873863" Oct 2 18:49:37.207740 ignition[1183]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2982873863": device or resource busy Oct 2 18:49:37.207740 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2982873863", trying btrfs: device or resource busy Oct 2 18:49:37.207740 ignition[1183]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2982873863" Oct 2 18:49:37.207740 ignition[1183]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2982873863" Oct 2 18:49:37.232037 ignition[1183]: INFO : op(6): [started] unmounting "/mnt/oem2982873863" Oct 2 18:49:37.234598 ignition[1183]: INFO : op(6): [finished] unmounting "/mnt/oem2982873863" Oct 2 18:49:37.237102 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 18:49:37.240993 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 18:49:37.240993 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:49:37.248800 systemd[1]: mnt-oem2982873863.mount: Deactivated successfully. Oct 2 18:49:37.262171 ignition[1183]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4134856629" Oct 2 18:49:37.265333 ignition[1183]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4134856629": device or resource busy Oct 2 18:49:37.265333 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4134856629", trying btrfs: device or resource busy Oct 2 18:49:37.265333 ignition[1183]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4134856629" Oct 2 18:49:37.275746 ignition[1183]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4134856629" Oct 2 18:49:37.275746 ignition[1183]: INFO : op(9): [started] unmounting "/mnt/oem4134856629" Oct 2 18:49:37.275746 ignition[1183]: INFO : op(9): [finished] unmounting "/mnt/oem4134856629" Oct 2 18:49:37.275746 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 18:49:37.275746 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 18:49:37.275746 ignition[1183]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 18:49:37.307610 ignition[1183]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2656524433" Oct 2 18:49:37.307610 ignition[1183]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2656524433": device or resource busy Oct 2 18:49:37.307610 ignition[1183]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2656524433", trying btrfs: device or resource busy Oct 2 18:49:37.307610 ignition[1183]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2656524433" Oct 2 18:49:37.307610 ignition[1183]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2656524433" Oct 2 18:49:37.307610 ignition[1183]: INFO : op(c): [started] unmounting "/mnt/oem2656524433" Oct 2 18:49:37.330736 ignition[1183]: INFO : op(c): [finished] unmounting "/mnt/oem2656524433" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(10): [started] processing unit "nvidia.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(10): [finished] processing unit "nvidia.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(11): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(11): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(12): [started] processing unit "amazon-ssm-agent.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(12): op(13): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(12): op(13): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(12): [finished] processing unit "amazon-ssm-agent.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Oct 2 18:49:37.330736 ignition[1183]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Oct 2 18:49:37.430082 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 18:49:37.430117 kernel: audit: type=1130 audit(1696272577.396:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(19): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(19): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(1a): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(1a): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 18:49:37.430204 ignition[1183]: INFO : files: files passed Oct 2 18:49:37.430204 ignition[1183]: INFO : Ignition finished successfully Oct 2 18:49:37.341696 systemd[1]: mnt-oem2656524433.mount: Deactivated successfully. Oct 2 18:49:37.389151 systemd[1]: Finished ignition-files.service. Oct 2 18:49:37.414004 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 18:49:37.441031 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 18:49:37.516941 kernel: audit: type=1130 audit(1696272577.483:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.516986 kernel: audit: type=1131 audit(1696272577.483:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.447337 systemd[1]: Starting ignition-quench.service... Oct 2 18:49:37.476942 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 18:49:37.477137 systemd[1]: Finished ignition-quench.service. Oct 2 18:49:37.534211 initrd-setup-root-after-ignition[1208]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 18:49:37.539826 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 18:49:37.542652 systemd[1]: Reached target ignition-complete.target. Oct 2 18:49:37.548949 systemd[1]: Starting initrd-parse-etc.service... Oct 2 18:49:37.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.571726 kernel: audit: type=1130 audit(1696272577.540:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.600013 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 18:49:37.602074 systemd[1]: Finished initrd-parse-etc.service. Oct 2 18:49:37.624345 kernel: audit: type=1130 audit(1696272577.606:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.624392 kernel: audit: type=1131 audit(1696272577.606:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.608620 systemd[1]: Reached target initrd-fs.target. Oct 2 18:49:37.626189 systemd[1]: Reached target initrd.target. Oct 2 18:49:37.629296 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 18:49:37.630792 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 18:49:37.672442 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 18:49:37.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.679225 systemd[1]: Starting initrd-cleanup.service... Oct 2 18:49:37.688942 kernel: audit: type=1130 audit(1696272577.676:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.708378 systemd[1]: Stopped target nss-lookup.target. Oct 2 18:49:37.711943 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 18:49:37.715697 systemd[1]: Stopped target timers.target. Oct 2 18:49:37.718903 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 18:49:37.721115 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 18:49:37.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.726922 systemd[1]: Stopped target initrd.target. Oct 2 18:49:37.739080 kernel: audit: type=1131 audit(1696272577.723:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.733954 systemd[1]: Stopped target basic.target. Oct 2 18:49:37.735623 systemd[1]: Stopped target ignition-complete.target. Oct 2 18:49:37.737594 systemd[1]: Stopped target ignition-diskful.target. Oct 2 18:49:37.741030 systemd[1]: Stopped target initrd-root-device.target. Oct 2 18:49:37.743054 systemd[1]: Stopped target remote-fs.target. Oct 2 18:49:37.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.746279 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 18:49:37.773147 kernel: audit: type=1131 audit(1696272577.761:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.748227 systemd[1]: Stopped target sysinit.target. Oct 2 18:49:37.751743 systemd[1]: Stopped target local-fs.target. Oct 2 18:49:37.755190 systemd[1]: Stopped target local-fs-pre.target. Oct 2 18:49:37.757103 systemd[1]: Stopped target swap.target. Oct 2 18:49:37.760450 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 18:49:37.760660 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 18:49:37.762698 systemd[1]: Stopped target cryptsetup.target. Oct 2 18:49:37.780879 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 18:49:37.796953 kernel: audit: type=1131 audit(1696272577.786:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.784438 systemd[1]: Stopped dracut-initqueue.service. Oct 2 18:49:37.797029 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 18:49:37.798722 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 18:49:37.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.805012 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 18:49:37.807114 systemd[1]: Stopped ignition-files.service. Oct 2 18:49:37.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.811769 systemd[1]: Stopping ignition-mount.service... Oct 2 18:49:37.823038 iscsid[1033]: iscsid shutting down. Oct 2 18:49:37.816991 systemd[1]: Stopping iscsid.service... Oct 2 18:49:37.819848 systemd[1]: Stopping sysroot-boot.service... Oct 2 18:49:37.821484 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 18:49:37.821823 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 18:49:37.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.839986 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 18:49:37.842198 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 18:49:37.855582 ignition[1221]: INFO : Ignition 2.14.0 Oct 2 18:49:37.857437 ignition[1221]: INFO : Stage: umount Oct 2 18:49:37.857437 ignition[1221]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 18:49:37.857437 ignition[1221]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 18:49:37.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.876920 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 18:49:37.878789 systemd[1]: Stopped iscsid.service. Oct 2 18:49:37.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.887325 systemd[1]: Stopping iscsiuio.service... Oct 2 18:49:37.890470 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 18:49:37.892953 ignition[1221]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 18:49:37.895397 ignition[1221]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 18:49:37.897936 systemd[1]: Stopped iscsiuio.service. Oct 2 18:49:37.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.905844 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 18:49:37.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.906035 systemd[1]: Finished initrd-cleanup.service. Oct 2 18:49:37.911853 ignition[1221]: INFO : PUT result: OK Oct 2 18:49:37.918551 ignition[1221]: INFO : umount: umount passed Oct 2 18:49:37.920326 ignition[1221]: INFO : Ignition finished successfully Oct 2 18:49:37.923815 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 18:49:37.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.924005 systemd[1]: Stopped ignition-mount.service. Oct 2 18:49:37.928613 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 18:49:37.930367 systemd[1]: Stopped ignition-disks.service. Oct 2 18:49:37.932000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.934836 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 18:49:37.935027 systemd[1]: Stopped ignition-kargs.service. Oct 2 18:49:37.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.940107 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 18:49:37.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.940195 systemd[1]: Stopped ignition-fetch.service. Oct 2 18:49:37.948416 systemd[1]: Stopped target network.target. Oct 2 18:49:37.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.950135 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 18:49:37.950240 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 18:49:37.954292 systemd[1]: Stopped target paths.target. Oct 2 18:49:37.961656 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 18:49:37.967225 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 18:49:37.969072 systemd[1]: Stopped target slices.target. Oct 2 18:49:37.970617 systemd[1]: Stopped target sockets.target. Oct 2 18:49:37.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:37.972255 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 18:49:37.972330 systemd[1]: Closed iscsid.socket. Oct 2 18:49:37.976566 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 18:49:37.976645 systemd[1]: Closed iscsiuio.socket. Oct 2 18:49:37.979550 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 18:49:37.979635 systemd[1]: Stopped ignition-setup.service. Oct 2 18:49:37.981605 systemd[1]: Stopping systemd-networkd.service... Oct 2 18:49:37.984013 systemd[1]: Stopping systemd-resolved.service... Oct 2 18:49:37.986728 systemd-networkd[1028]: eth0: DHCPv6 lease lost Oct 2 18:49:37.999240 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 18:49:38.011000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.000146 systemd[1]: Stopped systemd-resolved.service. Oct 2 18:49:38.017373 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 18:49:38.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.018000 audit: BPF prog-id=6 op=UNLOAD Oct 2 18:49:38.017581 systemd[1]: Stopped systemd-networkd.service. Oct 2 18:49:38.020273 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 18:49:38.020354 systemd[1]: Closed systemd-networkd.socket. Oct 2 18:49:38.029179 systemd[1]: Stopping network-cleanup.service... Oct 2 18:49:38.033850 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 18:49:38.033955 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 18:49:38.040000 audit: BPF prog-id=9 op=UNLOAD Oct 2 18:49:38.043000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.045060 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 18:49:38.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.045155 systemd[1]: Stopped systemd-sysctl.service. Oct 2 18:49:38.048814 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 18:49:38.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.048900 systemd[1]: Stopped systemd-modules-load.service. Oct 2 18:49:38.057156 systemd[1]: Stopping systemd-udevd.service... Oct 2 18:49:38.071000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.070853 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 18:49:38.071051 systemd[1]: Stopped network-cleanup.service. Oct 2 18:49:38.077249 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 18:49:38.077860 systemd[1]: Stopped systemd-udevd.service. Oct 2 18:49:38.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.082906 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 18:49:38.083247 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 18:49:38.088611 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 18:49:38.088805 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 18:49:38.094083 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 18:49:38.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.094175 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 18:49:38.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.101280 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 18:49:38.101385 systemd[1]: Stopped dracut-cmdline.service. Oct 2 18:49:38.103249 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 18:49:38.103341 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 18:49:38.113454 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 18:49:38.119030 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Oct 2 18:49:38.120269 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Oct 2 18:49:38.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.125353 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 18:49:38.127536 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 18:49:38.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.131027 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 18:49:38.131210 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 18:49:38.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.147335 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 18:49:38.147737 systemd[1]: Stopped sysroot-boot.service. Oct 2 18:49:38.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.158801 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 18:49:38.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.165000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:38.158901 systemd[1]: Stopped initrd-setup-root.service. Oct 2 18:49:38.162501 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 18:49:38.162674 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 18:49:38.167032 systemd[1]: Reached target initrd-switch-root.target. Oct 2 18:49:38.190990 systemd[1]: Starting initrd-switch-root.service... Oct 2 18:49:38.206641 systemd[1]: sysroot-boot.mount: Deactivated successfully. Oct 2 18:49:38.208881 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Oct 2 18:49:38.211629 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Oct 2 18:49:38.225829 systemd[1]: Switching root. Oct 2 18:49:38.251815 systemd-journald[308]: Journal stopped Oct 2 18:49:43.533060 systemd-journald[308]: Received SIGTERM from PID 1 (systemd). Oct 2 18:49:43.563309 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 18:49:43.563422 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 18:49:43.563458 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 18:49:43.563490 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 18:49:43.563520 kernel: SELinux: policy capability open_perms=1 Oct 2 18:49:43.563551 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 18:49:43.563587 kernel: SELinux: policy capability always_check_network=0 Oct 2 18:49:43.563626 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 18:49:43.563659 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 18:49:43.563719 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 18:49:43.563754 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 18:49:43.563790 systemd[1]: Successfully loaded SELinux policy in 85.596ms. Oct 2 18:49:43.564012 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.497ms. Oct 2 18:49:43.564051 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 18:49:43.564088 systemd[1]: Detected virtualization amazon. Oct 2 18:49:43.564121 systemd[1]: Detected architecture arm64. Oct 2 18:49:43.564152 systemd[1]: Detected first boot. Oct 2 18:49:43.564182 systemd[1]: Initializing machine ID from VM UUID. Oct 2 18:49:43.564279 systemd[1]: Populated /etc with preset unit settings. Oct 2 18:49:43.564315 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:49:43.564349 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:49:43.564385 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:49:43.564484 kernel: kauditd_printk_skb: 40 callbacks suppressed Oct 2 18:49:43.564518 kernel: audit: type=1334 audit(1696272583.001:84): prog-id=12 op=LOAD Oct 2 18:49:43.564550 kernel: audit: type=1334 audit(1696272583.001:85): prog-id=3 op=UNLOAD Oct 2 18:49:43.564578 kernel: audit: type=1334 audit(1696272583.003:86): prog-id=13 op=LOAD Oct 2 18:49:43.564611 kernel: audit: type=1334 audit(1696272583.005:87): prog-id=14 op=LOAD Oct 2 18:49:43.564643 kernel: audit: type=1334 audit(1696272583.005:88): prog-id=4 op=UNLOAD Oct 2 18:49:43.564701 kernel: audit: type=1334 audit(1696272583.005:89): prog-id=5 op=UNLOAD Oct 2 18:49:43.564742 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 18:49:43.564779 kernel: audit: type=1334 audit(1696272583.008:90): prog-id=15 op=LOAD Oct 2 18:49:43.564809 kernel: audit: type=1334 audit(1696272583.008:91): prog-id=12 op=UNLOAD Oct 2 18:49:43.564842 kernel: audit: type=1334 audit(1696272583.010:92): prog-id=16 op=LOAD Oct 2 18:49:43.564882 kernel: audit: type=1334 audit(1696272583.013:93): prog-id=17 op=LOAD Oct 2 18:49:43.564918 systemd[1]: Stopped initrd-switch-root.service. Oct 2 18:49:43.564956 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 18:49:43.564991 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 18:49:43.565023 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 18:49:43.565061 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 18:49:43.565096 systemd[1]: Created slice system-getty.slice. Oct 2 18:49:43.565128 systemd[1]: Created slice system-modprobe.slice. Oct 2 18:49:43.565169 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 18:49:43.565200 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 18:49:43.565236 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 18:49:43.565272 systemd[1]: Created slice user.slice. Oct 2 18:49:43.565308 systemd[1]: Started systemd-ask-password-console.path. Oct 2 18:49:43.565350 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 18:49:43.565387 systemd[1]: Set up automount boot.automount. Oct 2 18:49:43.565421 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 18:49:43.565456 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 18:49:43.565491 systemd[1]: Stopped target initrd-fs.target. Oct 2 18:49:43.565522 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 18:49:43.565553 systemd[1]: Reached target integritysetup.target. Oct 2 18:49:43.565586 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 18:49:43.565621 systemd[1]: Reached target remote-fs.target. Oct 2 18:49:43.565665 systemd[1]: Reached target slices.target. Oct 2 18:49:43.565741 systemd[1]: Reached target swap.target. Oct 2 18:49:43.565777 systemd[1]: Reached target torcx.target. Oct 2 18:49:43.565808 systemd[1]: Reached target veritysetup.target. Oct 2 18:49:43.565839 systemd[1]: Listening on systemd-coredump.socket. Oct 2 18:49:43.565868 systemd[1]: Listening on systemd-initctl.socket. Oct 2 18:49:43.565898 systemd[1]: Listening on systemd-networkd.socket. Oct 2 18:49:43.565930 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 18:49:43.565965 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 18:49:43.565995 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 18:49:43.566032 systemd[1]: Mounting dev-hugepages.mount... Oct 2 18:49:43.566062 systemd[1]: Mounting dev-mqueue.mount... Oct 2 18:49:43.566094 systemd[1]: Mounting media.mount... Oct 2 18:49:43.566126 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 18:49:43.566156 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 18:49:43.566186 systemd[1]: Mounting tmp.mount... Oct 2 18:49:43.566216 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 18:49:43.566246 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 18:49:43.566275 systemd[1]: Starting kmod-static-nodes.service... Oct 2 18:49:43.566309 systemd[1]: Starting modprobe@configfs.service... Oct 2 18:49:43.566339 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 18:49:43.566371 systemd[1]: Starting modprobe@drm.service... Oct 2 18:49:43.566400 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 18:49:43.566432 systemd[1]: Starting modprobe@fuse.service... Oct 2 18:49:43.566462 systemd[1]: Starting modprobe@loop.service... Oct 2 18:49:43.566495 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 18:49:43.566527 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 18:49:43.566557 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 18:49:43.566591 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 18:49:43.566621 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 18:49:43.566652 systemd[1]: Stopped systemd-journald.service. Oct 2 18:49:43.566856 systemd[1]: Starting systemd-journald.service... Oct 2 18:49:43.566898 systemd[1]: Starting systemd-modules-load.service... Oct 2 18:49:43.566929 systemd[1]: Starting systemd-network-generator.service... Oct 2 18:49:43.566962 systemd[1]: Starting systemd-remount-fs.service... Oct 2 18:49:43.566997 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 18:49:43.567032 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 18:49:43.567071 kernel: fuse: init (API version 7.34) Oct 2 18:49:43.567106 systemd[1]: Stopped verity-setup.service. Oct 2 18:49:43.567140 systemd[1]: Mounted dev-hugepages.mount. Oct 2 18:49:43.567176 systemd[1]: Mounted dev-mqueue.mount. Oct 2 18:49:43.567210 systemd[1]: Mounted media.mount. Oct 2 18:49:43.567319 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 18:49:43.567355 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 18:49:43.567390 systemd[1]: Mounted tmp.mount. Oct 2 18:49:43.567427 systemd[1]: Finished kmod-static-nodes.service. Oct 2 18:49:43.567465 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 18:49:43.567499 systemd[1]: Finished modprobe@configfs.service. Oct 2 18:49:43.567529 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 18:49:43.567560 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 18:49:43.567595 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 18:49:43.567633 kernel: loop: module loaded Oct 2 18:49:43.567666 systemd[1]: Finished modprobe@drm.service. Oct 2 18:49:43.567733 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 18:49:43.567770 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 18:49:43.567806 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 18:49:43.567852 systemd[1]: Finished modprobe@fuse.service. Oct 2 18:49:43.567891 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 18:49:43.567923 systemd[1]: Finished modprobe@loop.service. Oct 2 18:49:43.567959 systemd[1]: Finished systemd-modules-load.service. Oct 2 18:49:43.567992 systemd[1]: Finished systemd-network-generator.service. Oct 2 18:49:43.568022 systemd[1]: Finished systemd-remount-fs.service. Oct 2 18:49:43.568053 systemd[1]: Reached target network-pre.target. Oct 2 18:49:43.568087 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 18:49:43.568118 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 18:49:43.568149 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 18:49:43.568183 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 18:49:43.568213 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 18:49:43.568244 systemd[1]: Starting systemd-random-seed.service... Oct 2 18:49:43.568281 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 18:49:43.568316 systemd[1]: Starting systemd-sysctl.service... Oct 2 18:49:43.568349 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 18:49:43.568445 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 18:49:43.568483 systemd-journald[1331]: Journal started Oct 2 18:49:43.568589 systemd-journald[1331]: Runtime Journal (/run/log/journal/ec2133ced1e0fe1deb973bdbba6d345b) is 8.0M, max 75.4M, 67.4M free. Oct 2 18:49:38.888000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 18:49:39.063000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:49:43.579274 systemd[1]: Started systemd-journald.service. Oct 2 18:49:39.063000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 18:49:39.063000 audit: BPF prog-id=10 op=LOAD Oct 2 18:49:39.063000 audit: BPF prog-id=10 op=UNLOAD Oct 2 18:49:39.063000 audit: BPF prog-id=11 op=LOAD Oct 2 18:49:39.063000 audit: BPF prog-id=11 op=UNLOAD Oct 2 18:49:43.001000 audit: BPF prog-id=12 op=LOAD Oct 2 18:49:43.001000 audit: BPF prog-id=3 op=UNLOAD Oct 2 18:49:43.003000 audit: BPF prog-id=13 op=LOAD Oct 2 18:49:43.005000 audit: BPF prog-id=14 op=LOAD Oct 2 18:49:43.005000 audit: BPF prog-id=4 op=UNLOAD Oct 2 18:49:43.005000 audit: BPF prog-id=5 op=UNLOAD Oct 2 18:49:43.008000 audit: BPF prog-id=15 op=LOAD Oct 2 18:49:43.008000 audit: BPF prog-id=12 op=UNLOAD Oct 2 18:49:43.010000 audit: BPF prog-id=16 op=LOAD Oct 2 18:49:43.013000 audit: BPF prog-id=17 op=LOAD Oct 2 18:49:43.013000 audit: BPF prog-id=13 op=UNLOAD Oct 2 18:49:43.013000 audit: BPF prog-id=14 op=UNLOAD Oct 2 18:49:43.015000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.033000 audit: BPF prog-id=15 op=UNLOAD Oct 2 18:49:43.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.319000 audit: BPF prog-id=18 op=LOAD Oct 2 18:49:43.319000 audit: BPF prog-id=19 op=LOAD Oct 2 18:49:43.319000 audit: BPF prog-id=20 op=LOAD Oct 2 18:49:43.319000 audit: BPF prog-id=16 op=UNLOAD Oct 2 18:49:43.319000 audit: BPF prog-id=17 op=UNLOAD Oct 2 18:49:43.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.528000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 18:49:43.528000 audit[1331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffcc993870 a2=4000 a3=1 items=0 ppid=1 pid=1331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:43.528000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 18:49:43.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.000250 systemd[1]: Queued start job for default target multi-user.target. Oct 2 18:49:39.243408 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:49:43.016328 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 18:49:39.253455 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:49:43.576399 systemd[1]: Starting systemd-journal-flush.service... Oct 2 18:49:39.253508 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:49:39.253582 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 18:49:39.253611 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 18:49:39.253669 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 18:49:39.253756 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 18:49:39.254175 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 18:49:39.254250 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 18:49:39.254285 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 18:49:39.255313 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 18:49:39.255395 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 18:49:39.255442 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 18:49:39.255527 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 18:49:39.255577 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 18:49:39.255615 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:39Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 18:49:43.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:42.179413 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:42Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:49:43.606292 systemd[1]: Finished systemd-random-seed.service. Oct 2 18:49:42.179966 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:42Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:49:43.608463 systemd[1]: Reached target first-boot-complete.target. Oct 2 18:49:42.180206 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:42Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:49:42.180649 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:42Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 18:49:43.618466 systemd-journald[1331]: Time spent on flushing to /var/log/journal/ec2133ced1e0fe1deb973bdbba6d345b is 48.681ms for 1153 entries. Oct 2 18:49:43.618466 systemd-journald[1331]: System Journal (/var/log/journal/ec2133ced1e0fe1deb973bdbba6d345b) is 8.0M, max 195.6M, 187.6M free. Oct 2 18:49:43.686946 systemd-journald[1331]: Received client request to flush runtime journal. Oct 2 18:49:43.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:42.180776 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:42Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 18:49:43.672950 systemd[1]: Finished systemd-sysctl.service. Oct 2 18:49:42.180925 /usr/lib/systemd/system-generators/torcx-generator[1256]: time="2023-10-02T18:49:42Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 18:49:43.689862 systemd[1]: Finished systemd-journal-flush.service. Oct 2 18:49:43.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.764419 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 18:49:43.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.769007 systemd[1]: Starting systemd-udev-settle.service... Oct 2 18:49:43.800252 udevadm[1370]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 18:49:43.806758 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 18:49:43.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.811195 systemd[1]: Starting systemd-sysusers.service... Oct 2 18:49:43.910916 systemd[1]: Finished systemd-sysusers.service. Oct 2 18:49:43.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:43.915259 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 18:49:43.989033 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 18:49:43.990000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:44.569251 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 18:49:44.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:44.570000 audit: BPF prog-id=21 op=LOAD Oct 2 18:49:44.570000 audit: BPF prog-id=22 op=LOAD Oct 2 18:49:44.570000 audit: BPF prog-id=7 op=UNLOAD Oct 2 18:49:44.570000 audit: BPF prog-id=8 op=UNLOAD Oct 2 18:49:44.573596 systemd[1]: Starting systemd-udevd.service... Oct 2 18:49:44.619353 systemd-udevd[1379]: Using default interface naming scheme 'v252'. Oct 2 18:49:44.659265 systemd[1]: Started systemd-udevd.service. Oct 2 18:49:44.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:44.661000 audit: BPF prog-id=23 op=LOAD Oct 2 18:49:44.664162 systemd[1]: Starting systemd-networkd.service... Oct 2 18:49:44.682000 audit: BPF prog-id=24 op=LOAD Oct 2 18:49:44.683000 audit: BPF prog-id=25 op=LOAD Oct 2 18:49:44.683000 audit: BPF prog-id=26 op=LOAD Oct 2 18:49:44.688974 systemd[1]: Starting systemd-userdbd.service... Oct 2 18:49:44.778856 (udev-worker)[1380]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:44.817452 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 18:49:44.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:44.895956 systemd[1]: Started systemd-userdbd.service. Oct 2 18:49:45.065801 systemd-networkd[1386]: lo: Link UP Oct 2 18:49:45.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.065824 systemd-networkd[1386]: lo: Gained carrier Oct 2 18:49:45.066704 systemd-networkd[1386]: Enumeration completed Oct 2 18:49:45.066851 systemd[1]: Started systemd-networkd.service. Oct 2 18:49:45.067011 systemd-networkd[1386]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 18:49:45.073463 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 18:49:45.079730 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 18:49:45.084340 systemd-networkd[1386]: eth0: Link UP Oct 2 18:49:45.084640 systemd-networkd[1386]: eth0: Gained carrier Oct 2 18:49:45.096969 systemd-networkd[1386]: eth0: DHCPv4 address 172.31.16.86/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 18:49:45.112751 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1382) Oct 2 18:49:45.314487 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 18:49:45.318429 systemd[1]: Finished systemd-udev-settle.service. Oct 2 18:49:45.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.322599 systemd[1]: Starting lvm2-activation-early.service... Oct 2 18:49:45.363395 lvm[1498]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:49:45.402600 systemd[1]: Finished lvm2-activation-early.service. Oct 2 18:49:45.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.404855 systemd[1]: Reached target cryptsetup.target. Oct 2 18:49:45.408921 systemd[1]: Starting lvm2-activation.service... Oct 2 18:49:45.423724 lvm[1499]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 18:49:45.459706 systemd[1]: Finished lvm2-activation.service. Oct 2 18:49:45.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.461749 systemd[1]: Reached target local-fs-pre.target. Oct 2 18:49:45.463553 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 18:49:45.463611 systemd[1]: Reached target local-fs.target. Oct 2 18:49:45.465455 systemd[1]: Reached target machines.target. Oct 2 18:49:45.469485 systemd[1]: Starting ldconfig.service... Oct 2 18:49:45.482712 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 18:49:45.482816 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:49:45.484977 systemd[1]: Starting systemd-boot-update.service... Oct 2 18:49:45.491543 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 18:49:45.502580 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 18:49:45.507096 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:49:45.507223 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 18:49:45.510939 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 18:49:45.519623 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1501 (bootctl) Oct 2 18:49:45.522256 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 18:49:45.578221 systemd-tmpfiles[1504]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 18:49:45.580512 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 18:49:45.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.585025 systemd-tmpfiles[1504]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 18:49:45.588872 systemd-tmpfiles[1504]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 18:49:45.653359 systemd-fsck[1510]: fsck.fat 4.2 (2021-01-31) Oct 2 18:49:45.653359 systemd-fsck[1510]: /dev/nvme0n1p1: 236 files, 113463/258078 clusters Oct 2 18:49:45.660449 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 18:49:45.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.665150 systemd[1]: Mounting boot.mount... Oct 2 18:49:45.709030 systemd[1]: Mounted boot.mount. Oct 2 18:49:45.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.735584 systemd[1]: Finished systemd-boot-update.service. Oct 2 18:49:45.929264 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 18:49:45.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.935916 systemd[1]: Starting audit-rules.service... Oct 2 18:49:45.939830 systemd[1]: Starting clean-ca-certificates.service... Oct 2 18:49:45.945250 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 18:49:45.948000 audit: BPF prog-id=27 op=LOAD Oct 2 18:49:45.954285 systemd[1]: Starting systemd-resolved.service... Oct 2 18:49:45.955000 audit: BPF prog-id=28 op=LOAD Oct 2 18:49:45.959351 systemd[1]: Starting systemd-timesyncd.service... Oct 2 18:49:45.967548 systemd[1]: Starting systemd-update-utmp.service... Oct 2 18:49:46.003000 audit[1529]: SYSTEM_BOOT pid=1529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 18:49:46.011631 systemd[1]: Finished clean-ca-certificates.service. Oct 2 18:49:46.014102 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 18:49:46.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:46.024420 systemd[1]: Finished systemd-update-utmp.service. Oct 2 18:49:46.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:46.172034 systemd[1]: Started systemd-timesyncd.service. Oct 2 18:49:46.174124 systemd[1]: Reached target time-set.target. Oct 2 18:49:46.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:46.230804 systemd-resolved[1527]: Positive Trust Anchors: Oct 2 18:49:46.230832 systemd-resolved[1527]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 18:49:46.230885 systemd-resolved[1527]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 18:49:46.312567 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 18:49:46.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.859947 systemd-timesyncd[1528]: Contacted time server 50.251.160.20:123 (0.flatcar.pool.ntp.org). Oct 2 18:49:46.167811 systemd-journald[1331]: Time jumped backwards, rotating. Oct 2 18:49:45.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:45.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:46.029000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 18:49:46.029000 audit[1546]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc851a330 a2=420 a3=0 items=0 ppid=1524 pid=1546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:46.029000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 18:49:45.860161 systemd-timesyncd[1528]: Initial clock synchronization to Mon 2023-10-02 18:49:45.859623 UTC. Oct 2 18:49:46.168438 augenrules[1546]: No rules Oct 2 18:49:45.958853 systemd-resolved[1527]: Defaulting to hostname 'linux'. Oct 2 18:49:45.962354 systemd[1]: Started systemd-resolved.service. Oct 2 18:49:45.964648 systemd[1]: Reached target network.target. Oct 2 18:49:45.966692 systemd[1]: Reached target nss-lookup.target. Oct 2 18:49:45.983900 systemd-networkd[1386]: eth0: Gained IPv6LL Oct 2 18:49:45.987703 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 18:49:45.990073 systemd[1]: Reached target network-online.target. Oct 2 18:49:46.031967 systemd[1]: Finished audit-rules.service. Oct 2 18:49:46.195298 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 18:49:46.196339 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 18:49:46.337257 ldconfig[1500]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 18:49:46.343410 systemd[1]: Finished ldconfig.service. Oct 2 18:49:46.347425 systemd[1]: Starting systemd-update-done.service... Oct 2 18:49:46.369566 systemd[1]: Finished systemd-update-done.service. Oct 2 18:49:46.371858 systemd[1]: Reached target sysinit.target. Oct 2 18:49:46.373934 systemd[1]: Started motdgen.path. Oct 2 18:49:46.375518 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 18:49:46.378127 systemd[1]: Started logrotate.timer. Oct 2 18:49:46.380020 systemd[1]: Started mdadm.timer. Oct 2 18:49:46.381546 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 18:49:46.383451 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 18:49:46.383515 systemd[1]: Reached target paths.target. Oct 2 18:49:46.385227 systemd[1]: Reached target timers.target. Oct 2 18:49:46.387387 systemd[1]: Listening on dbus.socket. Oct 2 18:49:46.391169 systemd[1]: Starting docker.socket... Oct 2 18:49:46.401426 systemd[1]: Listening on sshd.socket. Oct 2 18:49:46.403204 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:49:46.404086 systemd[1]: Listening on docker.socket. Oct 2 18:49:46.405957 systemd[1]: Reached target sockets.target. Oct 2 18:49:46.407674 systemd[1]: Reached target basic.target. Oct 2 18:49:46.409516 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:49:46.409579 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 18:49:46.411714 systemd[1]: Started amazon-ssm-agent.service. Oct 2 18:49:46.416196 systemd[1]: Starting containerd.service... Oct 2 18:49:46.420343 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 18:49:46.424684 systemd[1]: Starting dbus.service... Oct 2 18:49:46.430274 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 18:49:46.434929 systemd[1]: Starting extend-filesystems.service... Oct 2 18:49:46.436841 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 18:49:46.444452 systemd[1]: Starting motdgen.service... Oct 2 18:49:46.448322 systemd[1]: Started nvidia.service. Oct 2 18:49:46.452327 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 18:49:46.457782 systemd[1]: Starting prepare-critools.service... Oct 2 18:49:46.463890 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 18:49:46.522088 jq[1569]: true Oct 2 18:49:46.529375 jq[1559]: false Oct 2 18:49:46.467870 systemd[1]: Starting sshd-keygen.service... Oct 2 18:49:46.475031 systemd[1]: Starting systemd-logind.service... Oct 2 18:49:46.477364 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 18:49:46.477575 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 18:49:46.478463 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 18:49:46.482811 systemd[1]: Starting update-engine.service... Oct 2 18:49:46.487249 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 18:49:46.544507 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 18:49:46.544878 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 18:49:46.582809 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 18:49:46.583187 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 18:49:46.695167 jq[1570]: true Oct 2 18:49:46.702019 tar[1575]: ./ Oct 2 18:49:46.702019 tar[1575]: ./macvlan Oct 2 18:49:46.747251 tar[1576]: crictl Oct 2 18:49:46.761310 dbus-daemon[1558]: [system] SELinux support is enabled Oct 2 18:49:46.761622 systemd[1]: Started dbus.service. Oct 2 18:49:46.766526 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 18:49:46.766574 systemd[1]: Reached target system-config.target. Oct 2 18:49:46.768539 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 18:49:46.768569 systemd[1]: Reached target user-config.target. Oct 2 18:49:46.798653 dbus-daemon[1558]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1386 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 18:49:46.818091 dbus-daemon[1558]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 18:49:46.824362 systemd[1]: Starting systemd-hostnamed.service... Oct 2 18:49:46.835901 amazon-ssm-agent[1555]: 2023/10/02 18:49:46 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 18:49:46.851065 extend-filesystems[1560]: Found nvme0n1 Oct 2 18:49:46.856467 extend-filesystems[1560]: Found nvme0n1p1 Oct 2 18:49:46.858450 extend-filesystems[1560]: Found nvme0n1p2 Oct 2 18:49:46.863717 extend-filesystems[1560]: Found nvme0n1p3 Oct 2 18:49:46.865373 extend-filesystems[1560]: Found usr Oct 2 18:49:46.868111 extend-filesystems[1560]: Found nvme0n1p4 Oct 2 18:49:46.870576 extend-filesystems[1560]: Found nvme0n1p6 Oct 2 18:49:46.870576 extend-filesystems[1560]: Found nvme0n1p7 Oct 2 18:49:46.870576 extend-filesystems[1560]: Found nvme0n1p9 Oct 2 18:49:46.870576 extend-filesystems[1560]: Checking size of /dev/nvme0n1p9 Oct 2 18:49:46.889253 amazon-ssm-agent[1555]: Initializing new seelog logger Oct 2 18:49:46.896682 amazon-ssm-agent[1555]: New Seelog Logger Creation Complete Oct 2 18:49:46.898683 amazon-ssm-agent[1555]: 2023/10/02 18:49:46 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 18:49:46.902166 amazon-ssm-agent[1555]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 18:49:46.906361 amazon-ssm-agent[1555]: 2023/10/02 18:49:46 processing appconfig overrides Oct 2 18:49:46.918675 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 18:49:46.919097 systemd[1]: Finished motdgen.service. Oct 2 18:49:46.961841 update_engine[1568]: I1002 18:49:46.961050 1568 main.cc:92] Flatcar Update Engine starting Oct 2 18:49:46.968061 systemd[1]: Started update-engine.service. Oct 2 18:49:46.971019 update_engine[1568]: I1002 18:49:46.970975 1568 update_check_scheduler.cc:74] Next update check in 11m12s Oct 2 18:49:46.972944 systemd[1]: Started locksmithd.service. Oct 2 18:49:47.028891 extend-filesystems[1560]: Resized partition /dev/nvme0n1p9 Oct 2 18:49:47.043664 extend-filesystems[1631]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 18:49:47.087177 bash[1633]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:49:47.087761 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 18:49:47.089383 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 18:49:47.150778 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 18:49:47.185603 systemd-logind[1567]: Watching system buttons on /dev/input/event0 (Power Button) Oct 2 18:49:47.187015 systemd-logind[1567]: New seat seat0. Oct 2 18:49:47.194723 extend-filesystems[1631]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 18:49:47.194723 extend-filesystems[1631]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 18:49:47.194723 extend-filesystems[1631]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 18:49:47.212248 env[1579]: time="2023-10-02T18:49:47.203000483Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 18:49:47.212683 extend-filesystems[1560]: Resized filesystem in /dev/nvme0n1p9 Oct 2 18:49:47.218563 tar[1575]: ./static Oct 2 18:49:47.217113 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 18:49:47.217448 systemd[1]: Finished extend-filesystems.service. Oct 2 18:49:47.223288 systemd[1]: Started systemd-logind.service. Oct 2 18:49:47.226714 systemd[1]: Created slice system-sshd.slice. Oct 2 18:49:47.265396 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 18:49:47.293629 dbus-daemon[1558]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 18:49:47.293889 systemd[1]: Started systemd-hostnamed.service. Oct 2 18:49:47.296919 dbus-daemon[1558]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1606 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 18:49:47.301569 systemd[1]: Starting polkit.service... Oct 2 18:49:47.344544 polkitd[1645]: Started polkitd version 121 Oct 2 18:49:47.363309 polkitd[1645]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 18:49:47.363424 polkitd[1645]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 18:49:47.376045 polkitd[1645]: Finished loading, compiling and executing 2 rules Oct 2 18:49:47.376868 dbus-daemon[1558]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 18:49:47.377267 systemd[1]: Started polkit.service. Oct 2 18:49:47.379915 polkitd[1645]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 18:49:47.397622 systemd-hostnamed[1606]: Hostname set to (transient) Oct 2 18:49:47.397811 systemd-resolved[1527]: System hostname changed to 'ip-172-31-16-86'. Oct 2 18:49:47.504952 tar[1575]: ./vlan Oct 2 18:49:47.517067 env[1579]: time="2023-10-02T18:49:47.516884664Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 18:49:47.518702 env[1579]: time="2023-10-02T18:49:47.518657076Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:49:47.528542 env[1579]: time="2023-10-02T18:49:47.528472008Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:49:47.528785 env[1579]: time="2023-10-02T18:49:47.528720576Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:49:47.529251 env[1579]: time="2023-10-02T18:49:47.529206528Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:49:47.529406 env[1579]: time="2023-10-02T18:49:47.529375788Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 18:49:47.529528 env[1579]: time="2023-10-02T18:49:47.529495512Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 18:49:47.529647 env[1579]: time="2023-10-02T18:49:47.529614396Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 18:49:47.529929 env[1579]: time="2023-10-02T18:49:47.529898904Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:49:47.530653 env[1579]: time="2023-10-02T18:49:47.530613564Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 18:49:47.531106 env[1579]: time="2023-10-02T18:49:47.531060600Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 18:49:47.531297 env[1579]: time="2023-10-02T18:49:47.531264744Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 18:49:47.531530 env[1579]: time="2023-10-02T18:49:47.531498816Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 18:49:47.532323 env[1579]: time="2023-10-02T18:49:47.532282320Z" level=info msg="metadata content store policy set" policy=shared Oct 2 18:49:47.546700 env[1579]: time="2023-10-02T18:49:47.546644784Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 18:49:47.547117 env[1579]: time="2023-10-02T18:49:47.547078896Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 18:49:47.547256 env[1579]: time="2023-10-02T18:49:47.547224720Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 18:49:47.547492 env[1579]: time="2023-10-02T18:49:47.547446072Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.547955 env[1579]: time="2023-10-02T18:49:47.547916244Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.548094 env[1579]: time="2023-10-02T18:49:47.548064672Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.548243 env[1579]: time="2023-10-02T18:49:47.548212524Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.549061 env[1579]: time="2023-10-02T18:49:47.549010668Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.549236 env[1579]: time="2023-10-02T18:49:47.549205032Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.549365 env[1579]: time="2023-10-02T18:49:47.549333456Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.549661 env[1579]: time="2023-10-02T18:49:47.549625740Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.549813 env[1579]: time="2023-10-02T18:49:47.549782796Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 18:49:47.550157 env[1579]: time="2023-10-02T18:49:47.550124496Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 18:49:47.550476 env[1579]: time="2023-10-02T18:49:47.550412880Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 18:49:47.551594 env[1579]: time="2023-10-02T18:49:47.551549028Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 18:49:47.551794 env[1579]: time="2023-10-02T18:49:47.551763648Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.552363 env[1579]: time="2023-10-02T18:49:47.552327648Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 18:49:47.552876 env[1579]: time="2023-10-02T18:49:47.552826788Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.553398 env[1579]: time="2023-10-02T18:49:47.553360980Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.556532 env[1579]: time="2023-10-02T18:49:47.556481004Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.557202 env[1579]: time="2023-10-02T18:49:47.557168496Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.557326 env[1579]: time="2023-10-02T18:49:47.557297580Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.557569 env[1579]: time="2023-10-02T18:49:47.557538924Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.557884 env[1579]: time="2023-10-02T18:49:47.557851908Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.558033 env[1579]: time="2023-10-02T18:49:47.558003516Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.559199 env[1579]: time="2023-10-02T18:49:47.559162884Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 18:49:47.559647 env[1579]: time="2023-10-02T18:49:47.559610076Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.559837 env[1579]: time="2023-10-02T18:49:47.559806204Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.560853 env[1579]: time="2023-10-02T18:49:47.560802516Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.561035 env[1579]: time="2023-10-02T18:49:47.561003900Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 18:49:47.561160 env[1579]: time="2023-10-02T18:49:47.561127020Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 18:49:47.561275 env[1579]: time="2023-10-02T18:49:47.561246180Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 18:49:47.561406 env[1579]: time="2023-10-02T18:49:47.561374772Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 18:49:47.561583 env[1579]: time="2023-10-02T18:49:47.561553440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 18:49:47.565274 env[1579]: time="2023-10-02T18:49:47.565145172Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 18:49:47.567166 env[1579]: time="2023-10-02T18:49:47.567123301Z" level=info msg="Connect containerd service" Oct 2 18:49:47.567370 env[1579]: time="2023-10-02T18:49:47.567325585Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 18:49:47.570535 env[1579]: time="2023-10-02T18:49:47.570479269Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 18:49:47.574508 env[1579]: time="2023-10-02T18:49:47.574454977Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 18:49:47.574834 env[1579]: time="2023-10-02T18:49:47.574801429Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 18:49:47.576303 env[1579]: time="2023-10-02T18:49:47.576265033Z" level=info msg="containerd successfully booted in 0.412215s" Oct 2 18:49:47.576401 systemd[1]: Started containerd.service. Oct 2 18:49:47.588483 env[1579]: time="2023-10-02T18:49:47.588412669Z" level=info msg="Start subscribing containerd event" Oct 2 18:49:47.590846 env[1579]: time="2023-10-02T18:49:47.590797117Z" level=info msg="Start recovering state" Oct 2 18:49:47.591416 env[1579]: time="2023-10-02T18:49:47.591387289Z" level=info msg="Start event monitor" Oct 2 18:49:47.592694 env[1579]: time="2023-10-02T18:49:47.592658857Z" level=info msg="Start snapshots syncer" Oct 2 18:49:47.592866 env[1579]: time="2023-10-02T18:49:47.592836721Z" level=info msg="Start cni network conf syncer for default" Oct 2 18:49:47.592977 env[1579]: time="2023-10-02T18:49:47.592949413Z" level=info msg="Start streaming server" Oct 2 18:49:47.700514 coreos-metadata[1557]: Oct 02 18:49:47.700 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 18:49:47.702071 coreos-metadata[1557]: Oct 02 18:49:47.701 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 18:49:47.703191 coreos-metadata[1557]: Oct 02 18:49:47.702 INFO Fetch successful Oct 2 18:49:47.703191 coreos-metadata[1557]: Oct 02 18:49:47.703 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 18:49:47.704401 coreos-metadata[1557]: Oct 02 18:49:47.704 INFO Fetch successful Oct 2 18:49:47.714656 unknown[1557]: wrote ssh authorized keys file for user: core Oct 2 18:49:47.754151 update-ssh-keys[1682]: Updated "/home/core/.ssh/authorized_keys" Oct 2 18:49:47.755205 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 18:49:47.769182 tar[1575]: ./portmap Oct 2 18:49:47.985918 tar[1575]: ./host-local Oct 2 18:49:48.020782 amazon-ssm-agent[1555]: 2023-10-02 18:49:48 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0c4c9093a3ffcd41a is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0c4c9093a3ffcd41a because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 18:49:48.020782 amazon-ssm-agent[1555]: status code: 400, request id: d0b0b873-d379-487c-a7a0-bfea20fa1957 Oct 2 18:49:48.020782 amazon-ssm-agent[1555]: 2023-10-02 18:49:48 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 18:49:48.116927 tar[1575]: ./vrf Oct 2 18:49:48.191618 systemd[1]: Finished prepare-critools.service. Oct 2 18:49:48.264627 tar[1575]: ./bridge Oct 2 18:49:48.368720 tar[1575]: ./tuning Oct 2 18:49:48.420891 tar[1575]: ./firewall Oct 2 18:49:48.486333 tar[1575]: ./host-device Oct 2 18:49:48.543721 tar[1575]: ./sbr Oct 2 18:49:48.595412 tar[1575]: ./loopback Oct 2 18:49:48.646053 tar[1575]: ./dhcp Oct 2 18:49:48.789233 tar[1575]: ./ptp Oct 2 18:49:48.851340 tar[1575]: ./ipvlan Oct 2 18:49:48.912280 tar[1575]: ./bandwidth Oct 2 18:49:48.997911 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 18:49:49.067824 locksmithd[1622]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 18:49:49.984487 sshd_keygen[1592]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 18:49:50.042228 systemd[1]: Finished sshd-keygen.service. Oct 2 18:49:50.046833 systemd[1]: Starting issuegen.service... Oct 2 18:49:50.050823 systemd[1]: Started sshd@0-172.31.16.86:22-139.178.89.65:37324.service. Oct 2 18:49:50.071033 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 18:49:50.071386 systemd[1]: Finished issuegen.service. Oct 2 18:49:50.075917 systemd[1]: Starting systemd-user-sessions.service... Oct 2 18:49:50.100156 systemd[1]: Finished systemd-user-sessions.service. Oct 2 18:49:50.104950 systemd[1]: Started getty@tty1.service. Oct 2 18:49:50.109483 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 18:49:50.111805 systemd[1]: Reached target getty.target. Oct 2 18:49:50.113664 systemd[1]: Reached target multi-user.target. Oct 2 18:49:50.118265 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 18:49:50.149874 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 18:49:50.150197 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 18:49:50.152705 systemd[1]: Startup finished in 1.181s (kernel) + 13.170s (initrd) + 11.864s (userspace) = 26.215s. Oct 2 18:49:50.253558 sshd[1760]: Accepted publickey for core from 139.178.89.65 port 37324 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:50.258764 sshd[1760]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:50.276401 systemd[1]: Created slice user-500.slice. Oct 2 18:49:50.278700 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 18:49:50.284469 systemd-logind[1567]: New session 1 of user core. Oct 2 18:49:50.306580 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 18:49:50.309762 systemd[1]: Starting user@500.service... Oct 2 18:49:50.321471 (systemd)[1769]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:50.532490 systemd[1769]: Queued start job for default target default.target. Oct 2 18:49:50.533517 systemd[1769]: Reached target paths.target. Oct 2 18:49:50.533569 systemd[1769]: Reached target sockets.target. Oct 2 18:49:50.533603 systemd[1769]: Reached target timers.target. Oct 2 18:49:50.533634 systemd[1769]: Reached target basic.target. Oct 2 18:49:50.533743 systemd[1769]: Reached target default.target. Oct 2 18:49:50.533821 systemd[1769]: Startup finished in 194ms. Oct 2 18:49:50.535008 systemd[1]: Started user@500.service. Oct 2 18:49:50.536892 systemd[1]: Started session-1.scope. Oct 2 18:49:50.700063 systemd[1]: Started sshd@1-172.31.16.86:22-139.178.89.65:37340.service. Oct 2 18:49:50.880961 sshd[1778]: Accepted publickey for core from 139.178.89.65 port 37340 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:50.881965 sshd[1778]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:50.890278 systemd-logind[1567]: New session 2 of user core. Oct 2 18:49:50.891184 systemd[1]: Started session-2.scope. Oct 2 18:49:51.048019 sshd[1778]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:51.053712 systemd-logind[1567]: Session 2 logged out. Waiting for processes to exit. Oct 2 18:49:51.054283 systemd[1]: sshd@1-172.31.16.86:22-139.178.89.65:37340.service: Deactivated successfully. Oct 2 18:49:51.055572 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 18:49:51.057030 systemd-logind[1567]: Removed session 2. Oct 2 18:49:51.082055 systemd[1]: Started sshd@2-172.31.16.86:22-139.178.89.65:37356.service. Oct 2 18:49:51.264256 sshd[1784]: Accepted publickey for core from 139.178.89.65 port 37356 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:51.268013 sshd[1784]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:51.276868 systemd[1]: Started session-3.scope. Oct 2 18:49:51.278780 systemd-logind[1567]: New session 3 of user core. Oct 2 18:49:51.413290 sshd[1784]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:51.418984 systemd-logind[1567]: Session 3 logged out. Waiting for processes to exit. Oct 2 18:49:51.420431 systemd[1]: sshd@2-172.31.16.86:22-139.178.89.65:37356.service: Deactivated successfully. Oct 2 18:49:51.421666 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 18:49:51.423216 systemd-logind[1567]: Removed session 3. Oct 2 18:49:51.443356 systemd[1]: Started sshd@3-172.31.16.86:22-139.178.89.65:37358.service. Oct 2 18:49:51.623888 sshd[1790]: Accepted publickey for core from 139.178.89.65 port 37358 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:51.627085 sshd[1790]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:51.636986 systemd-logind[1567]: New session 4 of user core. Oct 2 18:49:51.637306 systemd[1]: Started session-4.scope. Oct 2 18:49:51.784935 sshd[1790]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:51.791634 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 18:49:51.792769 systemd[1]: sshd@3-172.31.16.86:22-139.178.89.65:37358.service: Deactivated successfully. Oct 2 18:49:51.794257 systemd-logind[1567]: Session 4 logged out. Waiting for processes to exit. Oct 2 18:49:51.795801 systemd-logind[1567]: Removed session 4. Oct 2 18:49:51.816449 systemd[1]: Started sshd@4-172.31.16.86:22-139.178.89.65:37368.service. Oct 2 18:49:51.991465 sshd[1796]: Accepted publickey for core from 139.178.89.65 port 37368 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:51.994365 sshd[1796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:52.002500 systemd-logind[1567]: New session 5 of user core. Oct 2 18:49:52.003418 systemd[1]: Started session-5.scope. Oct 2 18:49:52.143826 sudo[1799]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 18:49:52.144849 sudo[1799]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:52.157011 dbus-daemon[1558]: avc: received setenforce notice (enforcing=1) Oct 2 18:49:52.159918 sudo[1799]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:52.184129 sshd[1796]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:52.190090 systemd-logind[1567]: Session 5 logged out. Waiting for processes to exit. Oct 2 18:49:52.190832 systemd[1]: sshd@4-172.31.16.86:22-139.178.89.65:37368.service: Deactivated successfully. Oct 2 18:49:52.192414 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 18:49:52.194154 systemd-logind[1567]: Removed session 5. Oct 2 18:49:52.216916 systemd[1]: Started sshd@5-172.31.16.86:22-139.178.89.65:37384.service. Oct 2 18:49:52.395096 sshd[1803]: Accepted publickey for core from 139.178.89.65 port 37384 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:52.399051 sshd[1803]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:52.407585 systemd-logind[1567]: New session 6 of user core. Oct 2 18:49:52.408480 systemd[1]: Started session-6.scope. Oct 2 18:49:52.528148 sudo[1807]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 18:49:52.528665 sudo[1807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:52.535889 sudo[1807]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:52.549379 sudo[1806]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 18:49:52.550343 sudo[1806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:52.574149 systemd[1]: Stopping audit-rules.service... Oct 2 18:49:52.579000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:49:52.582212 kernel: kauditd_printk_skb: 74 callbacks suppressed Oct 2 18:49:52.582297 kernel: audit: type=1305 audit(1696272592.579:164): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 18:49:52.579000 audit[1810]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc82fd600 a2=420 a3=0 items=0 ppid=1 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:52.599223 kernel: audit: type=1300 audit(1696272592.579:164): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc82fd600 a2=420 a3=0 items=0 ppid=1 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:52.579000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:49:52.602839 kernel: audit: type=1327 audit(1696272592.579:164): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 18:49:52.602898 auditctl[1810]: No rules Oct 2 18:49:52.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.603922 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 18:49:52.604245 systemd[1]: Stopped audit-rules.service. Oct 2 18:49:52.611137 systemd[1]: Starting audit-rules.service... Oct 2 18:49:52.612775 kernel: audit: type=1131 audit(1696272592.603:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.673584 augenrules[1827]: No rules Oct 2 18:49:52.675957 systemd[1]: Finished audit-rules.service. Oct 2 18:49:52.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.685000 audit[1806]: USER_END pid=1806 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.686267 sudo[1806]: pam_unix(sudo:session): session closed for user root Oct 2 18:49:52.695659 kernel: audit: type=1130 audit(1696272592.675:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.695752 kernel: audit: type=1106 audit(1696272592.685:167): pid=1806 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.685000 audit[1806]: CRED_DISP pid=1806 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.704567 kernel: audit: type=1104 audit(1696272592.685:168): pid=1806 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.720032 sshd[1803]: pam_unix(sshd:session): session closed for user core Oct 2 18:49:52.721000 audit[1803]: USER_END pid=1803 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:52.721000 audit[1803]: CRED_DISP pid=1803 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:52.744328 kernel: audit: type=1106 audit(1696272592.721:169): pid=1803 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:52.744413 kernel: audit: type=1104 audit(1696272592.721:170): pid=1803 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:52.735352 systemd[1]: sshd@5-172.31.16.86:22-139.178.89.65:37384.service: Deactivated successfully. Oct 2 18:49:52.736568 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 18:49:52.734000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.86:22-139.178.89.65:37384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.745593 systemd-logind[1567]: Session 6 logged out. Waiting for processes to exit. Oct 2 18:49:52.754553 kernel: audit: type=1131 audit(1696272592.734:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.16.86:22-139.178.89.65:37384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.765583 systemd[1]: Started sshd@6-172.31.16.86:22-139.178.89.65:37386.service. Oct 2 18:49:52.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.86:22-139.178.89.65:37386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:52.768471 systemd-logind[1567]: Removed session 6. Oct 2 18:49:52.938000 audit[1833]: USER_ACCT pid=1833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:52.939686 sshd[1833]: Accepted publickey for core from 139.178.89.65 port 37386 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:49:52.942000 audit[1833]: CRED_ACQ pid=1833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:52.942000 audit[1833]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfd3d430 a2=3 a3=1 items=0 ppid=1 pid=1833 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:52.942000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:49:52.943724 sshd[1833]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:49:52.953048 systemd[1]: Started session-7.scope. Oct 2 18:49:52.954817 systemd-logind[1567]: New session 7 of user core. Oct 2 18:49:52.965000 audit[1833]: USER_START pid=1833 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:52.971000 audit[1835]: CRED_ACQ pid=1835 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:49:53.073000 audit[1836]: USER_ACCT pid=1836 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:53.074871 sudo[1836]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 18:49:53.074000 audit[1836]: CRED_REFR pid=1836 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:53.075403 sudo[1836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 18:49:53.078000 audit[1836]: USER_START pid=1836 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:49:53.806067 systemd[1]: Starting docker.service... Oct 2 18:49:53.917703 env[1851]: time="2023-10-02T18:49:53.917608184Z" level=info msg="Starting up" Oct 2 18:49:53.921425 env[1851]: time="2023-10-02T18:49:53.921376844Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:49:53.921619 env[1851]: time="2023-10-02T18:49:53.921591068Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:49:53.921789 env[1851]: time="2023-10-02T18:49:53.921718784Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:49:53.921900 env[1851]: time="2023-10-02T18:49:53.921872804Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:49:53.927053 env[1851]: time="2023-10-02T18:49:53.926997908Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 18:49:53.927053 env[1851]: time="2023-10-02T18:49:53.927039392Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 18:49:53.927255 env[1851]: time="2023-10-02T18:49:53.927074528Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 18:49:53.927255 env[1851]: time="2023-10-02T18:49:53.927095996Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 18:49:53.937070 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1868813371-merged.mount: Deactivated successfully. Oct 2 18:49:54.142047 env[1851]: time="2023-10-02T18:49:54.141903773Z" level=info msg="Loading containers: start." Oct 2 18:49:54.252000 audit[1883]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1883 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.252000 audit[1883]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=fffffe1ad140 a2=0 a3=1 items=0 ppid=1851 pid=1883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.252000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 18:49:54.259000 audit[1885]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1885 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.259000 audit[1885]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffffb90bef0 a2=0 a3=1 items=0 ppid=1851 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.259000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 18:49:54.267000 audit[1887]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1887 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.267000 audit[1887]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd14a4d20 a2=0 a3=1 items=0 ppid=1851 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.267000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:49:54.274000 audit[1889]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1889 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.274000 audit[1889]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd61fe3f0 a2=0 a3=1 items=0 ppid=1851 pid=1889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.274000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:49:54.283000 audit[1891]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1891 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.283000 audit[1891]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcce3b990 a2=0 a3=1 items=0 ppid=1851 pid=1891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.283000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 18:49:54.324000 audit[1896]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1896 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.324000 audit[1896]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc4a67ba0 a2=0 a3=1 items=0 ppid=1851 pid=1896 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.324000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 18:49:54.342000 audit[1898]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1898 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.342000 audit[1898]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe63b3b30 a2=0 a3=1 items=0 ppid=1851 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.342000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 18:49:54.349000 audit[1900]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1900 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.349000 audit[1900]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffeb2e4990 a2=0 a3=1 items=0 ppid=1851 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.349000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 18:49:54.356000 audit[1902]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1902 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.356000 audit[1902]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffce4b6680 a2=0 a3=1 items=0 ppid=1851 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.356000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:54.377000 audit[1906]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1906 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.377000 audit[1906]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd9525190 a2=0 a3=1 items=0 ppid=1851 pid=1906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.377000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:54.381000 audit[1907]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1907 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.381000 audit[1907]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe1e63100 a2=0 a3=1 items=0 ppid=1851 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.381000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:54.394779 kernel: Initializing XFRM netlink socket Oct 2 18:49:54.442346 env[1851]: time="2023-10-02T18:49:54.442300135Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 18:49:54.446347 (udev-worker)[1863]: Network interface NamePolicy= disabled on kernel command line. Oct 2 18:49:54.477000 audit[1916]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1916 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.477000 audit[1916]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffdce14b90 a2=0 a3=1 items=0 ppid=1851 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 18:49:54.495000 audit[1919]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1919 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.495000 audit[1919]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc62a53a0 a2=0 a3=1 items=0 ppid=1851 pid=1919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.495000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 18:49:54.505000 audit[1922]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1922 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.505000 audit[1922]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc4083280 a2=0 a3=1 items=0 ppid=1851 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.505000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 18:49:54.513000 audit[1924]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1924 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.513000 audit[1924]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffda6ad380 a2=0 a3=1 items=0 ppid=1851 pid=1924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.513000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 18:49:54.523000 audit[1926]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1926 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.523000 audit[1926]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffcb2b1ea0 a2=0 a3=1 items=0 ppid=1851 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.523000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 18:49:54.530000 audit[1928]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1928 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.530000 audit[1928]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffc22eab40 a2=0 a3=1 items=0 ppid=1851 pid=1928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.530000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 18:49:54.537000 audit[1930]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1930 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.537000 audit[1930]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffdadbacf0 a2=0 a3=1 items=0 ppid=1851 pid=1930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.537000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 18:49:54.556000 audit[1933]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1933 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.556000 audit[1933]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd7fc8080 a2=0 a3=1 items=0 ppid=1851 pid=1933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.556000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 18:49:54.564000 audit[1935]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1935 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.564000 audit[1935]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffc2c2fde0 a2=0 a3=1 items=0 ppid=1851 pid=1935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.564000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 18:49:54.572000 audit[1937]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1937 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.572000 audit[1937]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe7c1f690 a2=0 a3=1 items=0 ppid=1851 pid=1937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.572000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 18:49:54.579000 audit[1939]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1939 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.579000 audit[1939]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe5cb5d60 a2=0 a3=1 items=0 ppid=1851 pid=1939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.579000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 18:49:54.581304 systemd-networkd[1386]: docker0: Link UP Oct 2 18:49:54.602000 audit[1943]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.602000 audit[1943]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffdbd78f30 a2=0 a3=1 items=0 ppid=1851 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.602000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:54.606000 audit[1944]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:49:54.606000 audit[1944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd34fc0b0 a2=0 a3=1 items=0 ppid=1851 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:49:54.606000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 18:49:54.608072 env[1851]: time="2023-10-02T18:49:54.608029363Z" level=info msg="Loading containers: done." Oct 2 18:49:54.636194 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck25355827-merged.mount: Deactivated successfully. Oct 2 18:49:54.650427 env[1851]: time="2023-10-02T18:49:54.650330876Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 18:49:54.650924 env[1851]: time="2023-10-02T18:49:54.650875004Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 18:49:54.651196 env[1851]: time="2023-10-02T18:49:54.651151196Z" level=info msg="Daemon has completed initialization" Oct 2 18:49:54.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:54.684358 systemd[1]: Started docker.service. Oct 2 18:49:54.697028 env[1851]: time="2023-10-02T18:49:54.694905500Z" level=info msg="API listen on /run/docker.sock" Oct 2 18:49:54.750550 systemd[1]: Reloading. Oct 2 18:49:54.981446 /usr/lib/systemd/system-generators/torcx-generator[1995]: time="2023-10-02T18:49:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:49:54.983664 /usr/lib/systemd/system-generators/torcx-generator[1995]: time="2023-10-02T18:49:54Z" level=info msg="torcx already run" Oct 2 18:49:55.153718 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:49:55.154318 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:49:55.197243 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:49:55.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.352000 audit: BPF prog-id=37 op=LOAD Oct 2 18:49:55.352000 audit: BPF prog-id=35 op=UNLOAD Oct 2 18:49:55.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.356000 audit: BPF prog-id=38 op=LOAD Oct 2 18:49:55.356000 audit: BPF prog-id=28 op=UNLOAD Oct 2 18:49:55.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.361000 audit: BPF prog-id=39 op=LOAD Oct 2 18:49:55.361000 audit: BPF prog-id=32 op=UNLOAD Oct 2 18:49:55.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.362000 audit: BPF prog-id=40 op=LOAD Oct 2 18:49:55.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.363000 audit: BPF prog-id=41 op=LOAD Oct 2 18:49:55.363000 audit: BPF prog-id=33 op=UNLOAD Oct 2 18:49:55.364000 audit: BPF prog-id=34 op=UNLOAD Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.366000 audit: BPF prog-id=42 op=LOAD Oct 2 18:49:55.366000 audit: BPF prog-id=24 op=UNLOAD Oct 2 18:49:55.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.367000 audit: BPF prog-id=43 op=LOAD Oct 2 18:49:55.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.368000 audit: BPF prog-id=44 op=LOAD Oct 2 18:49:55.369000 audit: BPF prog-id=25 op=UNLOAD Oct 2 18:49:55.369000 audit: BPF prog-id=26 op=UNLOAD Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit: BPF prog-id=45 op=LOAD Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.372000 audit: BPF prog-id=46 op=LOAD Oct 2 18:49:55.372000 audit: BPF prog-id=21 op=UNLOAD Oct 2 18:49:55.372000 audit: BPF prog-id=22 op=UNLOAD Oct 2 18:49:55.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.378000 audit: BPF prog-id=47 op=LOAD Oct 2 18:49:55.378000 audit: BPF prog-id=23 op=UNLOAD Oct 2 18:49:55.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.385000 audit: BPF prog-id=48 op=LOAD Oct 2 18:49:55.385000 audit: BPF prog-id=29 op=UNLOAD Oct 2 18:49:55.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.385000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.386000 audit: BPF prog-id=49 op=LOAD Oct 2 18:49:55.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.386000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.387000 audit: BPF prog-id=50 op=LOAD Oct 2 18:49:55.387000 audit: BPF prog-id=30 op=UNLOAD Oct 2 18:49:55.387000 audit: BPF prog-id=31 op=UNLOAD Oct 2 18:49:55.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.389000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.390000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.390000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.391000 audit: BPF prog-id=51 op=LOAD Oct 2 18:49:55.391000 audit: BPF prog-id=27 op=UNLOAD Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.393000 audit: BPF prog-id=52 op=LOAD Oct 2 18:49:55.393000 audit: BPF prog-id=18 op=UNLOAD Oct 2 18:49:55.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.393000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.393000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.394000 audit: BPF prog-id=53 op=LOAD Oct 2 18:49:55.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:49:55.395000 audit: BPF prog-id=54 op=LOAD Oct 2 18:49:55.395000 audit: BPF prog-id=19 op=UNLOAD Oct 2 18:49:55.396000 audit: BPF prog-id=20 op=UNLOAD Oct 2 18:49:55.415698 systemd[1]: Started kubelet.service. Oct 2 18:49:55.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:49:55.623854 kubelet[2044]: E1002 18:49:55.620278 2044 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 18:49:55.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:49:55.630883 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:49:55.631217 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:49:56.077712 env[1579]: time="2023-10-02T18:49:56.077558755Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\"" Oct 2 18:49:56.692195 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3198481576.mount: Deactivated successfully. Oct 2 18:49:58.919447 env[1579]: time="2023-10-02T18:49:58.919374649Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:58.923019 env[1579]: time="2023-10-02T18:49:58.922950193Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ebd6eba6928e5f8f82d90c8538a99543a7f31a39cfbb40e52bf9c5486da9a2dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:58.926433 env[1579]: time="2023-10-02T18:49:58.926377021Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:58.929694 env[1579]: time="2023-10-02T18:49:58.929629477Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:bb3eff7d20d94d44ffea47066a4400a70ede58abd9de01c80400817a955397b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:49:58.931542 env[1579]: time="2023-10-02T18:49:58.931494457Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.25.14\" returns image reference \"sha256:ebd6eba6928e5f8f82d90c8538a99543a7f31a39cfbb40e52bf9c5486da9a2dc\"" Oct 2 18:49:58.960649 env[1579]: time="2023-10-02T18:49:58.960584641Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\"" Oct 2 18:50:01.163676 env[1579]: time="2023-10-02T18:50:01.163589772Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:01.166688 env[1579]: time="2023-10-02T18:50:01.166599216Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:439086a7540e058995295148eb4f15a3d14f129b494e3d5645fb1742cd799c1e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:01.170492 env[1579]: time="2023-10-02T18:50:01.170422320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:01.174382 env[1579]: time="2023-10-02T18:50:01.174318420Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:44d63bed8020f7610851a1a653ad7c6df83bd02ad128303de939a39997854ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:01.176299 env[1579]: time="2023-10-02T18:50:01.176237040Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.25.14\" returns image reference \"sha256:439086a7540e058995295148eb4f15a3d14f129b494e3d5645fb1742cd799c1e\"" Oct 2 18:50:01.207957 env[1579]: time="2023-10-02T18:50:01.207889308Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\"" Oct 2 18:50:02.525542 env[1579]: time="2023-10-02T18:50:02.525470367Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:02.528646 env[1579]: time="2023-10-02T18:50:02.528572391Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4405f55bf1c9d908a16c5c9894679cdf78c6235dd653ca6d7cb78a8d7b4644d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:02.537010 env[1579]: time="2023-10-02T18:50:02.536927775Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:02.542779 env[1579]: time="2023-10-02T18:50:02.542672691Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:207b36120eca76bf8607682a3ee37e12b5156b921a9379d776b297ab01ca8198,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:02.544723 env[1579]: time="2023-10-02T18:50:02.544659531Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.25.14\" returns image reference \"sha256:4405f55bf1c9d908a16c5c9894679cdf78c6235dd653ca6d7cb78a8d7b4644d0\"" Oct 2 18:50:02.574822 env[1579]: time="2023-10-02T18:50:02.574716003Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\"" Oct 2 18:50:03.950207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3397440573.mount: Deactivated successfully. Oct 2 18:50:04.587073 env[1579]: time="2023-10-02T18:50:04.587001533Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:04.589973 env[1579]: time="2023-10-02T18:50:04.589911545Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:36ad84e6a838b02d80a9db87b13c83185253f647e2af2f58f91ac1346103ff4e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:04.593054 env[1579]: time="2023-10-02T18:50:04.592953401Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.25.14,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:04.597039 env[1579]: time="2023-10-02T18:50:04.596954657Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4a23f328943342be6a3eeda75cc7a01d175bcf8b096611c97d2aa14c843cf326,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:04.598141 env[1579]: time="2023-10-02T18:50:04.598062233Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.25.14\" returns image reference \"sha256:36ad84e6a838b02d80a9db87b13c83185253f647e2af2f58f91ac1346103ff4e\"" Oct 2 18:50:04.628838 env[1579]: time="2023-10-02T18:50:04.628782257Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\"" Oct 2 18:50:05.145309 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3488177841.mount: Deactivated successfully. Oct 2 18:50:05.158325 env[1579]: time="2023-10-02T18:50:05.158256472Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:05.162327 env[1579]: time="2023-10-02T18:50:05.162268804Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4e42fb3c9d90ed7895bc04a9d96fe3102a65b521f485cc5a4f3dd818afef9cef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:05.165091 env[1579]: time="2023-10-02T18:50:05.165032788Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:05.167974 env[1579]: time="2023-10-02T18:50:05.167896504Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:9001185023633d17a2f98ff69b6ff2615b8ea02a825adffa40422f51dfdcde9d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:05.169444 env[1579]: time="2023-10-02T18:50:05.169369720Z" level=info msg="PullImage \"registry.k8s.io/pause:3.8\" returns image reference \"sha256:4e42fb3c9d90ed7895bc04a9d96fe3102a65b521f485cc5a4f3dd818afef9cef\"" Oct 2 18:50:05.200595 env[1579]: time="2023-10-02T18:50:05.200537932Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 18:50:05.802592 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 18:50:05.817021 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 18:50:05.817256 kernel: audit: type=1130 audit(1696272605.804:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:05.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:05.804970 systemd[1]: Stopped kubelet.service. Oct 2 18:50:05.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:05.819899 systemd[1]: Started kubelet.service. Oct 2 18:50:05.828756 kernel: audit: type=1131 audit(1696272605.814:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:05.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:05.840968 kernel: audit: type=1130 audit(1696272605.819:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:06.042964 kubelet[2089]: E1002 18:50:06.042868 2089 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 18:50:06.056548 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:50:06.056921 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:50:06.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:50:06.068779 kernel: audit: type=1131 audit(1696272606.056:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:50:06.534142 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2524539604.mount: Deactivated successfully. Oct 2 18:50:09.443722 env[1579]: time="2023-10-02T18:50:09.443611689Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:09.447272 env[1579]: time="2023-10-02T18:50:09.447195837Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:09.451001 env[1579]: time="2023-10-02T18:50:09.450943749Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:09.454557 env[1579]: time="2023-10-02T18:50:09.454460277Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:09.456281 env[1579]: time="2023-10-02T18:50:09.456219081Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:ef245802824036d4a23ba6f8b3f04c055416f9dc73a54d546b1f98ad16f6b8cb\"" Oct 2 18:50:09.486625 env[1579]: time="2023-10-02T18:50:09.486529965Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 18:50:10.094467 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1292372717.mount: Deactivated successfully. Oct 2 18:50:10.847649 env[1579]: time="2023-10-02T18:50:10.847588272Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:10.852535 env[1579]: time="2023-10-02T18:50:10.852484980Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:10.857206 env[1579]: time="2023-10-02T18:50:10.857160144Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:10.861305 env[1579]: time="2023-10-02T18:50:10.861250572Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:10.863974 env[1579]: time="2023-10-02T18:50:10.862814472Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:b19406328e70dd2f6a36d6dbe4e867b0684ced2fdeb2f02ecb54ead39ec0bac0\"" Oct 2 18:50:16.294029 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 18:50:16.294400 systemd[1]: Stopped kubelet.service. Oct 2 18:50:16.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:16.320781 kernel: audit: type=1130 audit(1696272616.293:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:16.320937 kernel: audit: type=1131 audit(1696272616.293:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:16.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:16.310351 systemd[1]: Started kubelet.service. Oct 2 18:50:16.330568 kernel: audit: type=1130 audit(1696272616.309:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:16.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:16.471094 kubelet[2154]: E1002 18:50:16.471028 2154 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 18:50:16.474941 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 18:50:16.475277 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 18:50:16.475000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:50:16.484774 kernel: audit: type=1131 audit(1696272616.475:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 18:50:17.432003 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 18:50:17.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:17.440774 kernel: audit: type=1131 audit(1696272617.431:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:17.459000 audit: BPF prog-id=41 op=UNLOAD Oct 2 18:50:17.462747 kernel: audit: type=1334 audit(1696272617.459:423): prog-id=41 op=UNLOAD Oct 2 18:50:17.459000 audit: BPF prog-id=40 op=UNLOAD Oct 2 18:50:17.459000 audit: BPF prog-id=39 op=UNLOAD Oct 2 18:50:17.465798 kernel: audit: type=1334 audit(1696272617.459:424): prog-id=40 op=UNLOAD Oct 2 18:50:17.468778 kernel: audit: type=1334 audit(1696272617.459:425): prog-id=39 op=UNLOAD Oct 2 18:50:20.451162 systemd[1]: Stopped kubelet.service. Oct 2 18:50:20.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:20.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:20.468350 kernel: audit: type=1130 audit(1696272620.451:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:20.468491 kernel: audit: type=1131 audit(1696272620.459:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:20.511669 systemd[1]: Reloading. Oct 2 18:50:20.756378 /usr/lib/systemd/system-generators/torcx-generator[2188]: time="2023-10-02T18:50:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:50:20.756448 /usr/lib/systemd/system-generators/torcx-generator[2188]: time="2023-10-02T18:50:20Z" level=info msg="torcx already run" Oct 2 18:50:20.984250 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:50:20.984522 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:50:21.029652 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:50:21.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.189000 audit: BPF prog-id=55 op=LOAD Oct 2 18:50:21.189000 audit: BPF prog-id=37 op=UNLOAD Oct 2 18:50:21.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.192000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.193000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.193000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.194000 audit: BPF prog-id=56 op=LOAD Oct 2 18:50:21.194000 audit: BPF prog-id=38 op=UNLOAD Oct 2 18:50:21.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.199000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.199000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.200000 audit: BPF prog-id=57 op=LOAD Oct 2 18:50:21.200000 audit: BPF prog-id=42 op=UNLOAD Oct 2 18:50:21.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.202000 audit: BPF prog-id=58 op=LOAD Oct 2 18:50:21.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.203000 audit: BPF prog-id=59 op=LOAD Oct 2 18:50:21.203000 audit: BPF prog-id=43 op=UNLOAD Oct 2 18:50:21.204000 audit: BPF prog-id=44 op=UNLOAD Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.206000 audit: BPF prog-id=60 op=LOAD Oct 2 18:50:21.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.206000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.207000 audit: BPF prog-id=61 op=LOAD Oct 2 18:50:21.207000 audit: BPF prog-id=45 op=UNLOAD Oct 2 18:50:21.207000 audit: BPF prog-id=46 op=UNLOAD Oct 2 18:50:21.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.213000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.214000 audit: BPF prog-id=62 op=LOAD Oct 2 18:50:21.214000 audit: BPF prog-id=47 op=UNLOAD Oct 2 18:50:21.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.220000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.221000 audit: BPF prog-id=63 op=LOAD Oct 2 18:50:21.221000 audit: BPF prog-id=48 op=UNLOAD Oct 2 18:50:21.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.223000 audit: BPF prog-id=64 op=LOAD Oct 2 18:50:21.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.224000 audit: BPF prog-id=65 op=LOAD Oct 2 18:50:21.225000 audit: BPF prog-id=49 op=UNLOAD Oct 2 18:50:21.225000 audit: BPF prog-id=50 op=UNLOAD Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.227000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.228000 audit: BPF prog-id=66 op=LOAD Oct 2 18:50:21.228000 audit: BPF prog-id=51 op=UNLOAD Oct 2 18:50:21.229000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.230000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.231000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.231000 audit: BPF prog-id=67 op=LOAD Oct 2 18:50:21.231000 audit: BPF prog-id=52 op=UNLOAD Oct 2 18:50:21.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.233000 audit: BPF prog-id=68 op=LOAD Oct 2 18:50:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.233000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.233000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.234000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.234000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:21.234000 audit: BPF prog-id=69 op=LOAD Oct 2 18:50:21.234000 audit: BPF prog-id=53 op=UNLOAD Oct 2 18:50:21.234000 audit: BPF prog-id=54 op=UNLOAD Oct 2 18:50:21.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:21.287616 systemd[1]: Started kubelet.service. Oct 2 18:50:21.424915 kubelet[2241]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 18:50:21.424915 kubelet[2241]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:50:21.424915 kubelet[2241]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:50:21.425577 kubelet[2241]: I1002 18:50:21.425134 2241 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:50:21.428268 kubelet[2241]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 18:50:21.428268 kubelet[2241]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:50:21.428268 kubelet[2241]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:50:23.214775 kubelet[2241]: I1002 18:50:23.214696 2241 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 18:50:23.214775 kubelet[2241]: I1002 18:50:23.214763 2241 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:50:23.215412 kubelet[2241]: I1002 18:50:23.215161 2241 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 18:50:23.222837 kubelet[2241]: E1002 18:50:23.222788 2241 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.16.86:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.223099 kubelet[2241]: I1002 18:50:23.223068 2241 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:50:23.225861 kubelet[2241]: W1002 18:50:23.225798 2241 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:50:23.227233 kubelet[2241]: I1002 18:50:23.227174 2241 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:50:23.227817 kubelet[2241]: I1002 18:50:23.227782 2241 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:50:23.227950 kubelet[2241]: I1002 18:50:23.227919 2241 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 18:50:23.228189 kubelet[2241]: I1002 18:50:23.228159 2241 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 18:50:23.228259 kubelet[2241]: I1002 18:50:23.228200 2241 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 18:50:23.228405 kubelet[2241]: I1002 18:50:23.228375 2241 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:50:23.235330 kubelet[2241]: I1002 18:50:23.235259 2241 kubelet.go:381] "Attempting to sync node with API server" Oct 2 18:50:23.235330 kubelet[2241]: I1002 18:50:23.235317 2241 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:50:23.235576 kubelet[2241]: I1002 18:50:23.235355 2241 kubelet.go:281] "Adding apiserver pod source" Oct 2 18:50:23.235576 kubelet[2241]: I1002 18:50:23.235384 2241 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:50:23.238392 kubelet[2241]: I1002 18:50:23.238347 2241 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:50:23.239611 kubelet[2241]: W1002 18:50:23.239572 2241 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 18:50:23.242861 kubelet[2241]: W1002 18:50:23.242705 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.31.16.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-86&limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.243114 kubelet[2241]: E1002 18:50:23.243072 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.16.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-86&limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.244268 kubelet[2241]: I1002 18:50:23.244203 2241 server.go:1175] "Started kubelet" Oct 2 18:50:23.264362 kernel: kauditd_printk_skb: 173 callbacks suppressed Oct 2 18:50:23.264522 kernel: audit: type=1400 audit(1696272623.253:601): avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:23.253000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:23.264658 kubelet[2241]: I1002 18:50:23.254635 2241 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:50:23.264658 kubelet[2241]: I1002 18:50:23.254721 2241 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:50:23.264658 kubelet[2241]: I1002 18:50:23.255146 2241 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:50:23.253000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:23.265774 kubelet[2241]: I1002 18:50:23.265420 2241 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:50:23.270693 kubelet[2241]: E1002 18:50:23.266535 2241 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6aeb0292d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 244159277, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 244159277, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.16.86:6443/api/v1/namespaces/default/events": dial tcp 172.31.16.86:6443: connect: connection refused'(may retry after sleeping) Oct 2 18:50:23.270693 kubelet[2241]: W1002 18:50:23.267007 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.31.16.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.270693 kubelet[2241]: E1002 18:50:23.267087 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.16.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.271073 kubelet[2241]: E1002 18:50:23.268577 2241 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:50:23.271073 kubelet[2241]: E1002 18:50:23.268621 2241 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:50:23.253000 audit[2241]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d409f0 a1=40008d2ca8 a2=4000d409c0 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.282955 kernel: audit: type=1401 audit(1696272623.253:601): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:23.283091 kernel: audit: type=1300 audit(1696272623.253:601): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d409f0 a1=40008d2ca8 a2=4000d409c0 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.283634 kubelet[2241]: I1002 18:50:23.283582 2241 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 18:50:23.285822 kubelet[2241]: I1002 18:50:23.285778 2241 server.go:438] "Adding debug handlers to kubelet server" Oct 2 18:50:23.253000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:23.297332 kernel: audit: type=1327 audit(1696272623.253:601): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:23.253000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:23.301764 kubelet[2241]: I1002 18:50:23.301698 2241 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 18:50:23.302425 kubelet[2241]: E1002 18:50:23.302367 2241 controller.go:144] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.16.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-86?timeout=10s": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.304588 kubelet[2241]: W1002 18:50:23.304532 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.31.16.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.304823 kubelet[2241]: E1002 18:50:23.304797 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.16.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.307585 kernel: audit: type=1400 audit(1696272623.253:602): avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:23.307700 kernel: audit: type=1401 audit(1696272623.253:602): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:23.253000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:23.308807 kubelet[2241]: E1002 18:50:23.308765 2241 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:23.315801 kernel: audit: type=1300 audit(1696272623.253:602): arch=c00000b7 syscall=5 success=no exit=-22 a0=40000d0fc0 a1=40008d2cc0 a2=4000d40a80 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.253000 audit[2241]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40000d0fc0 a1=40008d2cc0 a2=4000d40a80 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.253000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:23.337796 kernel: audit: type=1327 audit(1696272623.253:602): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:23.264000 audit[2253]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.346922 kernel: audit: type=1325 audit(1696272623.264:603): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.347035 kernel: audit: type=1300 audit(1696272623.264:603): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffb650500 a2=0 a3=1 items=0 ppid=2241 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.264000 audit[2253]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffb650500 a2=0 a3=1 items=0 ppid=2241 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.264000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:50:23.299000 audit[2255]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.299000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd770b7f0 a2=0 a3=1 items=0 ppid=2241 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.299000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:50:23.340000 audit[2260]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.340000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff1ac7980 a2=0 a3=1 items=0 ppid=2241 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.340000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:50:23.365000 audit[2262]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.365000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe04d7e90 a2=0 a3=1 items=0 ppid=2241 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.365000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 18:50:23.376048 kubelet[2241]: I1002 18:50:23.375124 2241 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 18:50:23.376048 kubelet[2241]: I1002 18:50:23.375167 2241 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 18:50:23.376048 kubelet[2241]: I1002 18:50:23.375224 2241 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:50:23.379761 kubelet[2241]: I1002 18:50:23.377970 2241 policy_none.go:49] "None policy: Start" Oct 2 18:50:23.379761 kubelet[2241]: I1002 18:50:23.379332 2241 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 18:50:23.379761 kubelet[2241]: I1002 18:50:23.379401 2241 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:50:23.384098 kubelet[2241]: E1002 18:50:23.383843 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.390003 kubelet[2241]: I1002 18:50:23.389865 2241 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-86" Oct 2 18:50:23.392133 kubelet[2241]: E1002 18:50:23.391679 2241 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.86:6443/api/v1/nodes\": dial tcp 172.31.16.86:6443: connect: connection refused" node="ip-172-31-16-86" Oct 2 18:50:23.394126 systemd[1]: Created slice kubepods.slice. Oct 2 18:50:23.398000 audit[2266]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.398000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd48704b0 a2=0 a3=1 items=0 ppid=2241 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.398000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 18:50:23.409133 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 18:50:23.410000 audit[2268]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.410000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffce0f9370 a2=0 a3=1 items=0 ppid=2241 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.410000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 18:50:23.417439 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 18:50:23.428672 kubelet[2241]: I1002 18:50:23.428599 2241 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:50:23.427000 audit[2241]: AVC avc: denied { mac_admin } for pid=2241 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:23.427000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:23.427000 audit[2241]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000977e90 a1=4000e3d770 a2=4000977e60 a3=25 items=0 ppid=1 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.427000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:23.429643 kubelet[2241]: I1002 18:50:23.429612 2241 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:50:23.430514 kubelet[2241]: I1002 18:50:23.430482 2241 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:50:23.433464 kubelet[2241]: E1002 18:50:23.433427 2241 eviction_manager.go:256] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.441000 audit[2271]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2271 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.441000 audit[2271]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffea866330 a2=0 a3=1 items=0 ppid=2241 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 18:50:23.456000 audit[2274]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.456000 audit[2274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffc64a94e0 a2=0 a3=1 items=0 ppid=2241 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.456000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 18:50:23.460000 audit[2275]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.460000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdbffa300 a2=0 a3=1 items=0 ppid=2241 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.460000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 18:50:23.464000 audit[2276]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.464000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe290d2d0 a2=0 a3=1 items=0 ppid=2241 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:50:23.474000 audit[2278]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.474000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd05344b0 a2=0 a3=1 items=0 ppid=2241 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.474000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 18:50:23.482000 audit[2280]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.482000 audit[2280]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc3b00e70 a2=0 a3=1 items=0 ppid=2241 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.482000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:50:23.484002 kubelet[2241]: E1002 18:50:23.483927 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.491000 audit[2282]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.491000 audit[2282]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffeb5fb1a0 a2=0 a3=1 items=0 ppid=2241 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.491000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 18:50:23.501000 audit[2284]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.501000 audit[2284]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffef775990 a2=0 a3=1 items=0 ppid=2241 pid=2284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 18:50:23.503517 kubelet[2241]: E1002 18:50:23.503437 2241 controller.go:144] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.16.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-86?timeout=10s": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.512000 audit[2286]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.512000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=540 a0=3 a1=fffffe9f2e50 a2=0 a3=1 items=0 ppid=2241 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.512000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 18:50:23.513997 kubelet[2241]: I1002 18:50:23.513959 2241 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 18:50:23.516000 audit[2288]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.516000 audit[2288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff83df2b0 a2=0 a3=1 items=0 ppid=2241 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.516000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:50:23.517000 audit[2287]: NETFILTER_CFG table=mangle:42 family=10 entries=2 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.517000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdd297510 a2=0 a3=1 items=0 ppid=2241 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.517000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 18:50:23.520000 audit[2289]: NETFILTER_CFG table=nat:43 family=2 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.520000 audit[2289]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec554fb0 a2=0 a3=1 items=0 ppid=2241 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.520000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:50:23.521000 audit[2290]: NETFILTER_CFG table=nat:44 family=10 entries=2 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.521000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe4153480 a2=0 a3=1 items=0 ppid=2241 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 18:50:23.524000 audit[2291]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:23.524000 audit[2291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffec6d310 a2=0 a3=1 items=0 ppid=2241 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:50:23.531000 audit[2293]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.531000 audit[2293]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe6bcf1d0 a2=0 a3=1 items=0 ppid=2241 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.531000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 18:50:23.535000 audit[2294]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.535000 audit[2294]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=132 a0=3 a1=ffffcce450e0 a2=0 a3=1 items=0 ppid=2241 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.535000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 18:50:23.545000 audit[2296]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.545000 audit[2296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=664 a0=3 a1=ffffefc60090 a2=0 a3=1 items=0 ppid=2241 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.545000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 18:50:23.549000 audit[2297]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.549000 audit[2297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc27e0840 a2=0 a3=1 items=0 ppid=2241 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.549000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 18:50:23.553000 audit[2298]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.553000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea2c7e00 a2=0 a3=1 items=0 ppid=2241 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.553000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 18:50:23.562000 audit[2300]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.562000 audit[2300]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe2f0cd00 a2=0 a3=1 items=0 ppid=2241 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.562000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 18:50:23.570000 audit[2302]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.570000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd8bec100 a2=0 a3=1 items=0 ppid=2241 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.570000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 18:50:23.578000 audit[2304]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.578000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=364 a0=3 a1=ffffe26358c0 a2=0 a3=1 items=0 ppid=2241 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.578000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 18:50:23.584104 kubelet[2241]: E1002 18:50:23.584046 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.587000 audit[2306]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.587000 audit[2306]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=220 a0=3 a1=ffffd4c15a70 a2=0 a3=1 items=0 ppid=2241 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.587000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 18:50:23.594606 kubelet[2241]: I1002 18:50:23.594573 2241 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-86" Oct 2 18:50:23.595347 kubelet[2241]: E1002 18:50:23.595295 2241 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.86:6443/api/v1/nodes\": dial tcp 172.31.16.86:6443: connect: connection refused" node="ip-172-31-16-86" Oct 2 18:50:23.599000 audit[2308]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.599000 audit[2308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=556 a0=3 a1=ffffe2e9d040 a2=0 a3=1 items=0 ppid=2241 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.599000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 18:50:23.600660 kubelet[2241]: I1002 18:50:23.600630 2241 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 18:50:23.600953 kubelet[2241]: I1002 18:50:23.600924 2241 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 18:50:23.601149 kubelet[2241]: I1002 18:50:23.601125 2241 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 18:50:23.601377 kubelet[2241]: E1002 18:50:23.601343 2241 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 18:50:23.602590 kubelet[2241]: W1002 18:50:23.602468 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.31.16.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.602774 kubelet[2241]: E1002 18:50:23.602593 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.16.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.605000 audit[2309]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.605000 audit[2309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff563ff50 a2=0 a3=1 items=0 ppid=2241 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.605000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 18:50:23.609000 audit[2310]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.609000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe88d2ef0 a2=0 a3=1 items=0 ppid=2241 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.609000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 18:50:23.614000 audit[2311]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:23.614000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe64175c0 a2=0 a3=1 items=0 ppid=2241 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:23.614000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 18:50:23.684626 kubelet[2241]: E1002 18:50:23.684580 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.702996 kubelet[2241]: I1002 18:50:23.702937 2241 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:23.703905 kubelet[2241]: I1002 18:50:23.703872 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2783febc4ab84443f56f0c9c1e790f34-ca-certs\") pod \"kube-apiserver-ip-172-31-16-86\" (UID: \"2783febc4ab84443f56f0c9c1e790f34\") " pod="kube-system/kube-apiserver-ip-172-31-16-86" Oct 2 18:50:23.704132 kubelet[2241]: I1002 18:50:23.704102 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2783febc4ab84443f56f0c9c1e790f34-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-86\" (UID: \"2783febc4ab84443f56f0c9c1e790f34\") " pod="kube-system/kube-apiserver-ip-172-31-16-86" Oct 2 18:50:23.704316 kubelet[2241]: I1002 18:50:23.704291 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2783febc4ab84443f56f0c9c1e790f34-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-86\" (UID: \"2783febc4ab84443f56f0c9c1e790f34\") " pod="kube-system/kube-apiserver-ip-172-31-16-86" Oct 2 18:50:23.705161 kubelet[2241]: I1002 18:50:23.705105 2241 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:23.707168 kubelet[2241]: I1002 18:50:23.707100 2241 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:23.708620 kubelet[2241]: I1002 18:50:23.708586 2241 status_manager.go:667] "Failed to get status for pod" podUID=2783febc4ab84443f56f0c9c1e790f34 pod="kube-system/kube-apiserver-ip-172-31-16-86" err="Get \"https://172.31.16.86:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-16-86\": dial tcp 172.31.16.86:6443: connect: connection refused" Oct 2 18:50:23.714484 kubelet[2241]: I1002 18:50:23.714414 2241 status_manager.go:667] "Failed to get status for pod" podUID=2ec68c491221fd50e23aa564a553d6f9 pod="kube-system/kube-scheduler-ip-172-31-16-86" err="Get \"https://172.31.16.86:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-16-86\": dial tcp 172.31.16.86:6443: connect: connection refused" Oct 2 18:50:23.715888 kubelet[2241]: I1002 18:50:23.715817 2241 status_manager.go:667] "Failed to get status for pod" podUID=c93b78e291050ed3824c08aaeabf5770 pod="kube-system/kube-controller-manager-ip-172-31-16-86" err="Get \"https://172.31.16.86:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-16-86\": dial tcp 172.31.16.86:6443: connect: connection refused" Oct 2 18:50:23.719570 systemd[1]: Created slice kubepods-burstable-pod2783febc4ab84443f56f0c9c1e790f34.slice. Oct 2 18:50:23.735774 systemd[1]: Created slice kubepods-burstable-podc93b78e291050ed3824c08aaeabf5770.slice. Oct 2 18:50:23.748215 systemd[1]: Created slice kubepods-burstable-pod2ec68c491221fd50e23aa564a553d6f9.slice. Oct 2 18:50:23.785721 kubelet[2241]: E1002 18:50:23.785638 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.805457 kubelet[2241]: I1002 18:50:23.805390 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:23.805606 kubelet[2241]: I1002 18:50:23.805471 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:23.805606 kubelet[2241]: I1002 18:50:23.805520 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:23.805606 kubelet[2241]: I1002 18:50:23.805576 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2ec68c491221fd50e23aa564a553d6f9-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-86\" (UID: \"2ec68c491221fd50e23aa564a553d6f9\") " pod="kube-system/kube-scheduler-ip-172-31-16-86" Oct 2 18:50:23.805862 kubelet[2241]: I1002 18:50:23.805662 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:23.805862 kubelet[2241]: I1002 18:50:23.805714 2241 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:23.886414 kubelet[2241]: E1002 18:50:23.886346 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.904259 kubelet[2241]: E1002 18:50:23.904208 2241 controller.go:144] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.16.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-86?timeout=10s": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:23.987270 kubelet[2241]: E1002 18:50:23.987138 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:23.997802 kubelet[2241]: I1002 18:50:23.997759 2241 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-86" Oct 2 18:50:23.998304 kubelet[2241]: E1002 18:50:23.998268 2241 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.86:6443/api/v1/nodes\": dial tcp 172.31.16.86:6443: connect: connection refused" node="ip-172-31-16-86" Oct 2 18:50:24.030912 env[1579]: time="2023-10-02T18:50:24.030848047Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-86,Uid:2783febc4ab84443f56f0c9c1e790f34,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:24.047102 env[1579]: time="2023-10-02T18:50:24.047020312Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-86,Uid:c93b78e291050ed3824c08aaeabf5770,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:24.053932 env[1579]: time="2023-10-02T18:50:24.053864359Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-86,Uid:2ec68c491221fd50e23aa564a553d6f9,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:24.088004 kubelet[2241]: E1002 18:50:24.087928 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.188747 kubelet[2241]: E1002 18:50:24.188657 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.235144 kubelet[2241]: W1002 18:50:24.235073 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Service: Get "https://172.31.16.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.235659 kubelet[2241]: E1002 18:50:24.235164 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.16.86:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.244356 kubelet[2241]: W1002 18:50:24.243467 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.CSIDriver: Get "https://172.31.16.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.244356 kubelet[2241]: E1002 18:50:24.243524 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.16.86:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.289457 kubelet[2241]: E1002 18:50:24.289408 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.310486 kubelet[2241]: W1002 18:50:24.310373 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.Node: Get "https://172.31.16.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-86&limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.310486 kubelet[2241]: E1002 18:50:24.310456 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.16.86:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-16-86&limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.390455 kubelet[2241]: E1002 18:50:24.390408 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.491330 kubelet[2241]: E1002 18:50:24.491280 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.522572 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1523702809.mount: Deactivated successfully. Oct 2 18:50:24.533779 env[1579]: time="2023-10-02T18:50:24.533689667Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.535308 env[1579]: time="2023-10-02T18:50:24.535255848Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.539974 env[1579]: time="2023-10-02T18:50:24.539886484Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.542008 env[1579]: time="2023-10-02T18:50:24.541959848Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.543632 env[1579]: time="2023-10-02T18:50:24.543583029Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.546408 env[1579]: time="2023-10-02T18:50:24.546341283Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.551358 env[1579]: time="2023-10-02T18:50:24.551296632Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.552874 env[1579]: time="2023-10-02T18:50:24.552828464Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.558688 env[1579]: time="2023-10-02T18:50:24.558632506Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.560479 env[1579]: time="2023-10-02T18:50:24.560430022Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.564410 env[1579]: time="2023-10-02T18:50:24.564355708Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.574340 env[1579]: time="2023-10-02T18:50:24.574270221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:24.593582 kubelet[2241]: E1002 18:50:24.593529 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.631949 env[1579]: time="2023-10-02T18:50:24.631439125Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:24.631949 env[1579]: time="2023-10-02T18:50:24.631510751Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:24.631949 env[1579]: time="2023-10-02T18:50:24.631535837Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:24.632352 env[1579]: time="2023-10-02T18:50:24.632259672Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f77a9ecf1ff1b8aab1c5a61136d22e34f940db9a58825c878dd2de10995c8a3f pid=2319 runtime=io.containerd.runc.v2 Oct 2 18:50:24.657816 env[1579]: time="2023-10-02T18:50:24.657647858Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:24.657987 env[1579]: time="2023-10-02T18:50:24.657838055Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:24.657987 env[1579]: time="2023-10-02T18:50:24.657903645Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:24.658560 env[1579]: time="2023-10-02T18:50:24.658466029Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/331ad58d674e1af52aaf64fe37bc6081ea6217c394bf784432d8b6e0a13bedfb pid=2334 runtime=io.containerd.runc.v2 Oct 2 18:50:24.658996 env[1579]: time="2023-10-02T18:50:24.658880184Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:24.659289 env[1579]: time="2023-10-02T18:50:24.659159654Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:24.659289 env[1579]: time="2023-10-02T18:50:24.659224873Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:24.660315 env[1579]: time="2023-10-02T18:50:24.660171477Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9132408199ec36e55ed4b1d537d6b1a1be4612fe4b82f0de6e0fc58564594f37 pid=2346 runtime=io.containerd.runc.v2 Oct 2 18:50:24.694166 kubelet[2241]: E1002 18:50:24.693891 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.698351 systemd[1]: Started cri-containerd-f77a9ecf1ff1b8aab1c5a61136d22e34f940db9a58825c878dd2de10995c8a3f.scope. Oct 2 18:50:24.705376 kubelet[2241]: E1002 18:50:24.705312 2241 controller.go:144] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.16.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-86?timeout=10s": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.727062 systemd[1]: Started cri-containerd-331ad58d674e1af52aaf64fe37bc6081ea6217c394bf784432d8b6e0a13bedfb.scope. Oct 2 18:50:24.745041 systemd[1]: Started cri-containerd-9132408199ec36e55ed4b1d537d6b1a1be4612fe4b82f0de6e0fc58564594f37.scope. Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.773000 audit: BPF prog-id=70 op=LOAD Oct 2 18:50:24.775000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.775000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2319 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637376139656366316666316238616162316335613631313336643232 Oct 2 18:50:24.775000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.775000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2319 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637376139656366316666316238616162316335613631313336643232 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.776000 audit: BPF prog-id=71 op=LOAD Oct 2 18:50:24.776000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2319 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637376139656366316666316238616162316335613631313336643232 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.778000 audit: BPF prog-id=72 op=LOAD Oct 2 18:50:24.778000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2319 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.778000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637376139656366316666316238616162316335613631313336643232 Oct 2 18:50:24.780000 audit: BPF prog-id=72 op=UNLOAD Oct 2 18:50:24.780000 audit: BPF prog-id=71 op=UNLOAD Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.781000 audit: BPF prog-id=73 op=LOAD Oct 2 18:50:24.781000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2319 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637376139656366316666316238616162316335613631313336643232 Oct 2 18:50:24.785340 kubelet[2241]: W1002 18:50:24.785178 2241 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:134: failed to list *v1.RuntimeClass: Get "https://172.31.16.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.785340 kubelet[2241]: E1002 18:50:24.785285 2241 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:134: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.16.86:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:24.795150 kubelet[2241]: E1002 18:50:24.795026 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.802461 kubelet[2241]: I1002 18:50:24.801624 2241 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-86" Oct 2 18:50:24.802461 kubelet[2241]: E1002 18:50:24.802368 2241 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.16.86:6443/api/v1/nodes\": dial tcp 172.31.16.86:6443: connect: connection refused" node="ip-172-31-16-86" Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.810000 audit: BPF prog-id=74 op=LOAD Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2346 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333234303831393965633336653535656434623164353337643662 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2346 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333234303831393965633336653535656434623164353337643662 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit: BPF prog-id=75 op=LOAD Oct 2 18:50:24.812000 audit[2365]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2346 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333234303831393965633336653535656434623164353337643662 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.812000 audit: BPF prog-id=76 op=LOAD Oct 2 18:50:24.812000 audit[2365]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2346 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333234303831393965633336653535656434623164353337643662 Oct 2 18:50:24.812000 audit: BPF prog-id=76 op=UNLOAD Oct 2 18:50:24.812000 audit: BPF prog-id=75 op=UNLOAD Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { perfmon } for pid=2365 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit[2365]: AVC avc: denied { bpf } for pid=2365 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.813000 audit: BPF prog-id=77 op=LOAD Oct 2 18:50:24.813000 audit[2365]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2346 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333234303831393965633336653535656434623164353337643662 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.833000 audit: BPF prog-id=78 op=LOAD Oct 2 18:50:24.836000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.836000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2334 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333316164353864363734653161663532616166363466653337626336 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2334 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333316164353864363734653161663532616166363466653337626336 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit: BPF prog-id=79 op=LOAD Oct 2 18:50:24.837000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2334 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333316164353864363734653161663532616166363466653337626336 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit: BPF prog-id=80 op=LOAD Oct 2 18:50:24.837000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2334 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333316164353864363734653161663532616166363466653337626336 Oct 2 18:50:24.837000 audit: BPF prog-id=80 op=UNLOAD Oct 2 18:50:24.837000 audit: BPF prog-id=79 op=UNLOAD Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:24.837000 audit: BPF prog-id=81 op=LOAD Oct 2 18:50:24.837000 audit[2364]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2334 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:24.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333316164353864363734653161663532616166363466653337626336 Oct 2 18:50:24.875190 env[1579]: time="2023-10-02T18:50:24.874968013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-16-86,Uid:c93b78e291050ed3824c08aaeabf5770,Namespace:kube-system,Attempt:0,} returns sandbox id \"f77a9ecf1ff1b8aab1c5a61136d22e34f940db9a58825c878dd2de10995c8a3f\"" Oct 2 18:50:24.892889 env[1579]: time="2023-10-02T18:50:24.892807022Z" level=info msg="CreateContainer within sandbox \"f77a9ecf1ff1b8aab1c5a61136d22e34f940db9a58825c878dd2de10995c8a3f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 18:50:24.895918 kubelet[2241]: E1002 18:50:24.895879 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:24.920045 env[1579]: time="2023-10-02T18:50:24.919985394Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-16-86,Uid:2ec68c491221fd50e23aa564a553d6f9,Namespace:kube-system,Attempt:0,} returns sandbox id \"331ad58d674e1af52aaf64fe37bc6081ea6217c394bf784432d8b6e0a13bedfb\"" Oct 2 18:50:24.925482 env[1579]: time="2023-10-02T18:50:24.925420668Z" level=info msg="CreateContainer within sandbox \"331ad58d674e1af52aaf64fe37bc6081ea6217c394bf784432d8b6e0a13bedfb\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 18:50:24.928037 env[1579]: time="2023-10-02T18:50:24.927962043Z" level=info msg="CreateContainer within sandbox \"f77a9ecf1ff1b8aab1c5a61136d22e34f940db9a58825c878dd2de10995c8a3f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb\"" Oct 2 18:50:24.930851 env[1579]: time="2023-10-02T18:50:24.930045077Z" level=info msg="StartContainer for \"0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb\"" Oct 2 18:50:24.947377 env[1579]: time="2023-10-02T18:50:24.947301642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-16-86,Uid:2783febc4ab84443f56f0c9c1e790f34,Namespace:kube-system,Attempt:0,} returns sandbox id \"9132408199ec36e55ed4b1d537d6b1a1be4612fe4b82f0de6e0fc58564594f37\"" Oct 2 18:50:24.958705 env[1579]: time="2023-10-02T18:50:24.958584629Z" level=info msg="CreateContainer within sandbox \"9132408199ec36e55ed4b1d537d6b1a1be4612fe4b82f0de6e0fc58564594f37\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 18:50:24.965911 env[1579]: time="2023-10-02T18:50:24.965534158Z" level=info msg="CreateContainer within sandbox \"331ad58d674e1af52aaf64fe37bc6081ea6217c394bf784432d8b6e0a13bedfb\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b\"" Oct 2 18:50:24.970239 env[1579]: time="2023-10-02T18:50:24.970183846Z" level=info msg="StartContainer for \"2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b\"" Oct 2 18:50:24.982478 env[1579]: time="2023-10-02T18:50:24.982375141Z" level=info msg="CreateContainer within sandbox \"9132408199ec36e55ed4b1d537d6b1a1be4612fe4b82f0de6e0fc58564594f37\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"6624bdd6a3f490dd0631f60dde629bd6dde137af02d7d15fb2c2cd1313d0fcd7\"" Oct 2 18:50:24.983490 env[1579]: time="2023-10-02T18:50:24.983435470Z" level=info msg="StartContainer for \"6624bdd6a3f490dd0631f60dde629bd6dde137af02d7d15fb2c2cd1313d0fcd7\"" Oct 2 18:50:24.996617 kubelet[2241]: E1002 18:50:24.996531 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.005833 systemd[1]: Started cri-containerd-0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb.scope. Oct 2 18:50:25.061613 systemd[1]: Started cri-containerd-2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b.scope. Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.083000 audit: BPF prog-id=82 op=LOAD Oct 2 18:50:25.085000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.085000 audit[2442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2319 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061656435323037663937303532643833336537656536346435373430 Oct 2 18:50:25.087000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.087000 audit[2442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2319 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061656435323037663937303532643833336537656536346435373430 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.088000 audit: BPF prog-id=83 op=LOAD Oct 2 18:50:25.088000 audit[2442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2319 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.088000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061656435323037663937303532643833336537656536346435373430 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.091000 audit: BPF prog-id=84 op=LOAD Oct 2 18:50:25.091000 audit[2442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2319 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061656435323037663937303532643833336537656536346435373430 Oct 2 18:50:25.094000 audit: BPF prog-id=84 op=UNLOAD Oct 2 18:50:25.094000 audit: BPF prog-id=83 op=UNLOAD Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.097504 kubelet[2241]: E1002 18:50:25.097425 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.094000 audit: BPF prog-id=85 op=LOAD Oct 2 18:50:25.094000 audit[2442]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2319 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.094000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061656435323037663937303532643833336537656536346435373430 Oct 2 18:50:25.126322 systemd[1]: Started cri-containerd-6624bdd6a3f490dd0631f60dde629bd6dde137af02d7d15fb2c2cd1313d0fcd7.scope. Oct 2 18:50:25.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.185000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.187000 audit: BPF prog-id=86 op=LOAD Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2346 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323462646436613366343930646430363331663630646465363239 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2346 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323462646436613366343930646430363331663630646465363239 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit: BPF prog-id=87 op=LOAD Oct 2 18:50:25.188000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2346 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323462646436613366343930646430363331663630646465363239 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit: BPF prog-id=88 op=LOAD Oct 2 18:50:25.188000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2346 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323462646436613366343930646430363331663630646465363239 Oct 2 18:50:25.188000 audit: BPF prog-id=88 op=UNLOAD Oct 2 18:50:25.188000 audit: BPF prog-id=87 op=UNLOAD Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { perfmon } for pid=2477 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit[2477]: AVC avc: denied { bpf } for pid=2477 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.188000 audit: BPF prog-id=89 op=LOAD Oct 2 18:50:25.188000 audit[2477]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2346 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636323462646436613366343930646430363331663630646465363239 Oct 2 18:50:25.203107 kubelet[2241]: E1002 18:50:25.197639 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.205000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.206000 audit: BPF prog-id=90 op=LOAD Oct 2 18:50:25.210000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.210000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2334 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336434333762633339303134333334303731393539396636623534 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2334 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336434333762633339303134333334303731393539396636623534 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.213000 audit: BPF prog-id=91 op=LOAD Oct 2 18:50:25.213000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2334 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336434333762633339303134333334303731393539396636623534 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.219000 audit: BPF prog-id=92 op=LOAD Oct 2 18:50:25.219000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2334 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336434333762633339303134333334303731393539396636623534 Oct 2 18:50:25.220000 audit: BPF prog-id=92 op=UNLOAD Oct 2 18:50:25.220000 audit: BPF prog-id=91 op=UNLOAD Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { perfmon } for pid=2469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit[2469]: AVC avc: denied { bpf } for pid=2469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:25.221000 audit: BPF prog-id=93 op=LOAD Oct 2 18:50:25.221000 audit[2469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2334 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:25.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336434333762633339303134333334303731393539396636623534 Oct 2 18:50:25.233337 env[1579]: time="2023-10-02T18:50:25.233267509Z" level=info msg="StartContainer for \"0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb\" returns successfully" Oct 2 18:50:25.254919 kubelet[2241]: E1002 18:50:25.254856 2241 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.16.86:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.16.86:6443: connect: connection refused Oct 2 18:50:25.298218 kubelet[2241]: E1002 18:50:25.298132 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.308582 env[1579]: time="2023-10-02T18:50:25.308516728Z" level=info msg="StartContainer for \"6624bdd6a3f490dd0631f60dde629bd6dde137af02d7d15fb2c2cd1313d0fcd7\" returns successfully" Oct 2 18:50:25.333706 env[1579]: time="2023-10-02T18:50:25.333550147Z" level=info msg="StartContainer for \"2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b\" returns successfully" Oct 2 18:50:25.399068 kubelet[2241]: E1002 18:50:25.398994 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.500011 kubelet[2241]: E1002 18:50:25.499906 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.600699 kubelet[2241]: E1002 18:50:25.600559 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.701486 kubelet[2241]: E1002 18:50:25.701430 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.802400 kubelet[2241]: E1002 18:50:25.802346 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:25.903010 kubelet[2241]: E1002 18:50:25.902875 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.003491 kubelet[2241]: E1002 18:50:26.003432 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.104077 kubelet[2241]: E1002 18:50:26.104023 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.204859 kubelet[2241]: E1002 18:50:26.204688 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.305164 kubelet[2241]: E1002 18:50:26.305102 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.405117 kubelet[2241]: I1002 18:50:26.405082 2241 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-86" Oct 2 18:50:26.405468 kubelet[2241]: E1002 18:50:26.405442 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.506495 kubelet[2241]: E1002 18:50:26.506359 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.607410 kubelet[2241]: E1002 18:50:26.607358 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.707933 kubelet[2241]: E1002 18:50:26.707885 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.809207 kubelet[2241]: E1002 18:50:26.809166 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:26.910282 kubelet[2241]: E1002 18:50:26.910239 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.011271 kubelet[2241]: E1002 18:50:27.011229 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.112380 kubelet[2241]: E1002 18:50:27.112234 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.213342 kubelet[2241]: E1002 18:50:27.213300 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.314648 kubelet[2241]: E1002 18:50:27.314601 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.416106 kubelet[2241]: E1002 18:50:27.415984 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.517341 kubelet[2241]: E1002 18:50:27.517294 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.584000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:27.584000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000052030 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:50:27.584000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:27.585000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:27.585000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000670080 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:50:27.585000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:27.618357 kubelet[2241]: E1002 18:50:27.618304 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.719590 kubelet[2241]: E1002 18:50:27.719452 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.820630 kubelet[2241]: E1002 18:50:27.820595 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:27.921581 kubelet[2241]: E1002 18:50:27.921536 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.022705 kubelet[2241]: E1002 18:50:28.022564 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.123788 kubelet[2241]: E1002 18:50:28.123682 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.224881 kubelet[2241]: E1002 18:50:28.224837 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.325479 kubelet[2241]: E1002 18:50:28.325411 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.427275 kubelet[2241]: E1002 18:50:28.427230 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.431406 kubelet[2241]: E1002 18:50:28.431371 2241 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:28.527762 kubelet[2241]: E1002 18:50:28.527701 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.628878 kubelet[2241]: E1002 18:50:28.628705 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.729793 kubelet[2241]: E1002 18:50:28.729722 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.830862 kubelet[2241]: E1002 18:50:28.830804 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:28.932044 kubelet[2241]: E1002 18:50:28.931898 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.033040 kubelet[2241]: E1002 18:50:29.032992 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.134118 kubelet[2241]: E1002 18:50:29.134072 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.235169 kubelet[2241]: E1002 18:50:29.235024 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.335362 kubelet[2241]: E1002 18:50:29.335313 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.436090 kubelet[2241]: E1002 18:50:29.436017 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.537200 kubelet[2241]: E1002 18:50:29.537037 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.637271 kubelet[2241]: E1002 18:50:29.637214 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.738489 kubelet[2241]: E1002 18:50:29.738415 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.839391 kubelet[2241]: E1002 18:50:29.839341 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:29.940589 kubelet[2241]: E1002 18:50:29.940534 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.041705 kubelet[2241]: E1002 18:50:30.041655 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.142909 kubelet[2241]: E1002 18:50:30.142781 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.244112 kubelet[2241]: E1002 18:50:30.244046 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.345112 kubelet[2241]: E1002 18:50:30.345062 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.445955 kubelet[2241]: E1002 18:50:30.445816 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.546950 kubelet[2241]: E1002 18:50:30.546902 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.647959 kubelet[2241]: E1002 18:50:30.647891 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.748351 kubelet[2241]: E1002 18:50:30.748194 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.848892 kubelet[2241]: E1002 18:50:30.848838 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:30.949567 kubelet[2241]: E1002 18:50:30.949499 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.050408 kubelet[2241]: E1002 18:50:31.050357 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.151103 kubelet[2241]: E1002 18:50:31.151050 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.252140 kubelet[2241]: E1002 18:50:31.252073 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.352855 kubelet[2241]: E1002 18:50:31.352699 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.453151 kubelet[2241]: E1002 18:50:31.453104 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.553857 kubelet[2241]: E1002 18:50:31.553795 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.654331 kubelet[2241]: E1002 18:50:31.654201 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.754841 kubelet[2241]: E1002 18:50:31.754794 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.845579 kernel: kauditd_printk_skb: 449 callbacks suppressed Oct 2 18:50:31.845699 kernel: audit: type=1400 audit(1696272631.831:747): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.831000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.875544 kernel: audit: type=1400 audit(1696272631.833:748): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.833000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.882876 kubelet[2241]: E1002 18:50:31.882839 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.833000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=4000b37f50 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.910000 kernel: audit: type=1300 audit(1696272631.833:748): arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=4000b37f50 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.833000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.932507 kernel: audit: type=1327 audit(1696272631.833:748): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.843000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.945791 kernel: audit: type=1400 audit(1696272631.843:749): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.945944 update_engine[1568]: I1002 18:50:31.943797 1568 update_attempter.cc:505] Updating boot flags... Oct 2 18:50:31.963055 kernel: audit: type=1300 audit(1696272631.843:749): arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4000b397d0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.843000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=4000b397d0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.843000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.974484 kernel: audit: type=1327 audit(1696272631.843:749): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.831000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4000bdc120 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.987316 kernel: audit: type=1300 audit(1696272631.831:747): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4000bdc120 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.987422 kubelet[2241]: E1002 18:50:31.983887 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:31.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.998558 kernel: audit: type=1327 audit(1696272631.831:747): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.854000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.854000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4000a1eec0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.854000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.875000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.875000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=62 a1=4002aafb80 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:32.017823 kernel: audit: type=1400 audit(1696272631.854:750): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.875000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:31.876000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:31.876000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=62 a1=4000f32840 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:50:31.876000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:50:32.084216 kubelet[2241]: E1002 18:50:32.084160 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:32.188942 kubelet[2241]: E1002 18:50:32.185116 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:32.289893 kubelet[2241]: E1002 18:50:32.289837 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:32.392983 kubelet[2241]: E1002 18:50:32.390238 2241 kubelet.go:2448] "Error getting node" err="node \"ip-172-31-16-86\" not found" Oct 2 18:50:32.434184 kubelet[2241]: E1002 18:50:32.434119 2241 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-16-86\" not found" node="ip-172-31-16-86" Oct 2 18:50:32.447566 kubelet[2241]: I1002 18:50:32.446927 2241 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-16-86" Oct 2 18:50:32.515420 kubelet[2241]: E1002 18:50:32.515038 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6aeb0292d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 244159277, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 244159277, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:32.619483 kubelet[2241]: E1002 18:50:32.619124 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b02523e1", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"InvalidDiskCapacity", Message:"invalid capacity 0 on image filesystem", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 268602849, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 268602849, time.Local), Count:1, Type:"Warning", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:32.677110 kubelet[2241]: E1002 18:50:32.676951 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b65e5cba", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-16-86 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373016250, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373016250, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:32.733120 kubelet[2241]: E1002 18:50:32.732886 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b65e8190", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-16-86 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373025680, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373025680, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:32.789610 kubelet[2241]: E1002 18:50:32.789418 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b65eab46", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-16-86 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373036358, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373036358, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:32.854594 kubelet[2241]: E1002 18:50:32.854362 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b65e5cba", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-16-86 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373016250, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 389790116, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:32.917753 kubelet[2241]: E1002 18:50:32.917560 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b65e8190", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasNoDiskPressure", Message:"Node ip-172-31-16-86 status is now: NodeHasNoDiskPressure", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373025680, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 389797974, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:32.976802 kubelet[2241]: E1002 18:50:32.976600 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b65eab46", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientPID", Message:"Node ip-172-31-16-86 status is now: NodeHasSufficientPID", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373036358, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 389802809, time.Local), Count:2, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:33.032367 kubelet[2241]: E1002 18:50:33.032082 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6ba0f39a5", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeAllocatableEnforced", Message:"Updated Node Allocatable limit across pods", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 434938789, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 434938789, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:33.177111 kubelet[2241]: E1002 18:50:33.176902 2241 event.go:267] Server rejected event '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-16-86.178a5ef6b65e5cba", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-16-86", UID:"ip-172-31-16-86", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"NodeHasSufficientMemory", Message:"Node ip-172-31-16-86 status is now: NodeHasSufficientMemory", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-16-86"}, FirstTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 373016250, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 18, 50, 23, 594487282, time.Local), Count:3, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'namespaces "default" not found' (will not retry!) Oct 2 18:50:33.255435 kubelet[2241]: I1002 18:50:33.255347 2241 apiserver.go:52] "Watching apiserver" Oct 2 18:50:33.399803 kubelet[2241]: I1002 18:50:33.399766 2241 reconciler.go:169] "Reconciler: start to sync state" Oct 2 18:50:33.433937 kubelet[2241]: E1002 18:50:33.433902 2241 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:34.988000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:34.988000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010db000 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:50:34.988000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:34.990000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:34.990000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010db160 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:50:34.990000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:34.992000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:34.992000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40010db2c0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:50:34.992000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:34.997295 systemd[1]: Reloading. Oct 2 18:50:35.011000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:50:35.011000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011476e0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:50:35.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:35.253084 /usr/lib/systemd/system-generators/torcx-generator[2666]: time="2023-10-02T18:50:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 18:50:35.253146 /usr/lib/systemd/system-generators/torcx-generator[2666]: time="2023-10-02T18:50:35Z" level=info msg="torcx already run" Oct 2 18:50:35.551993 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 18:50:35.552033 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 18:50:35.600717 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.823000 audit: BPF prog-id=94 op=LOAD Oct 2 18:50:35.823000 audit: BPF prog-id=55 op=UNLOAD Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.825000 audit: BPF prog-id=95 op=LOAD Oct 2 18:50:35.825000 audit: BPF prog-id=90 op=UNLOAD Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.827000 audit: BPF prog-id=96 op=LOAD Oct 2 18:50:35.827000 audit: BPF prog-id=56 op=UNLOAD Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.829000 audit: BPF prog-id=97 op=LOAD Oct 2 18:50:35.829000 audit: BPF prog-id=86 op=UNLOAD Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.831000 audit: BPF prog-id=98 op=LOAD Oct 2 18:50:35.831000 audit: BPF prog-id=74 op=UNLOAD Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit: BPF prog-id=99 op=LOAD Oct 2 18:50:35.835000 audit: BPF prog-id=57 op=UNLOAD Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit: BPF prog-id=100 op=LOAD Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.835000 audit: BPF prog-id=101 op=LOAD Oct 2 18:50:35.835000 audit: BPF prog-id=58 op=UNLOAD Oct 2 18:50:35.835000 audit: BPF prog-id=59 op=UNLOAD Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit: BPF prog-id=102 op=LOAD Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.836000 audit: BPF prog-id=103 op=LOAD Oct 2 18:50:35.836000 audit: BPF prog-id=60 op=UNLOAD Oct 2 18:50:35.836000 audit: BPF prog-id=61 op=UNLOAD Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.839000 audit: BPF prog-id=104 op=LOAD Oct 2 18:50:35.839000 audit: BPF prog-id=78 op=UNLOAD Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit: BPF prog-id=105 op=LOAD Oct 2 18:50:35.843000 audit: BPF prog-id=70 op=UNLOAD Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.844000 audit: BPF prog-id=106 op=LOAD Oct 2 18:50:35.844000 audit: BPF prog-id=62 op=UNLOAD Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit: BPF prog-id=107 op=LOAD Oct 2 18:50:35.850000 audit: BPF prog-id=63 op=UNLOAD Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit: BPF prog-id=108 op=LOAD Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.850000 audit: BPF prog-id=109 op=LOAD Oct 2 18:50:35.851000 audit: BPF prog-id=64 op=UNLOAD Oct 2 18:50:35.851000 audit: BPF prog-id=65 op=UNLOAD Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.852000 audit: BPF prog-id=110 op=LOAD Oct 2 18:50:35.853000 audit: BPF prog-id=82 op=UNLOAD Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.854000 audit: BPF prog-id=111 op=LOAD Oct 2 18:50:35.854000 audit: BPF prog-id=66 op=UNLOAD Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit: BPF prog-id=112 op=LOAD Oct 2 18:50:35.856000 audit: BPF prog-id=67 op=UNLOAD Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit: BPF prog-id=113 op=LOAD Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:35.856000 audit: BPF prog-id=114 op=LOAD Oct 2 18:50:35.856000 audit: BPF prog-id=68 op=UNLOAD Oct 2 18:50:35.856000 audit: BPF prog-id=69 op=UNLOAD Oct 2 18:50:35.895093 kubelet[2241]: I1002 18:50:35.891403 2241 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:50:35.892160 systemd[1]: Stopping kubelet.service... Oct 2 18:50:35.913348 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 18:50:35.913780 systemd[1]: Stopped kubelet.service. Oct 2 18:50:35.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:35.913877 systemd[1]: kubelet.service: Consumed 2.723s CPU time. Oct 2 18:50:35.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:35.917796 systemd[1]: Started kubelet.service. Oct 2 18:50:36.063000 audit[2732]: USER_ACCT pid=2732 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:36.064125 sudo[2732]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 18:50:36.063000 audit[2732]: CRED_REFR pid=2732 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:36.064633 sudo[2732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 18:50:36.072000 audit[2732]: USER_START pid=2732 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:36.122416 kubelet[2722]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 18:50:36.123300 kubelet[2722]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:50:36.123425 kubelet[2722]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:50:36.123908 kubelet[2722]: I1002 18:50:36.123840 2722 server.go:200] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 18:50:36.129241 kubelet[2722]: Flag --container-runtime has been deprecated, will be removed in 1.27 as the only valid value is 'remote' Oct 2 18:50:36.129413 kubelet[2722]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 18:50:36.129512 kubelet[2722]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 18:50:36.140331 kubelet[2722]: I1002 18:50:36.140288 2722 server.go:413] "Kubelet version" kubeletVersion="v1.25.10" Oct 2 18:50:36.140526 kubelet[2722]: I1002 18:50:36.140496 2722 server.go:415] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 18:50:36.141086 kubelet[2722]: I1002 18:50:36.141056 2722 server.go:825] "Client rotation is on, will bootstrap in background" Oct 2 18:50:36.144490 kubelet[2722]: I1002 18:50:36.144453 2722 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 18:50:36.151056 kubelet[2722]: W1002 18:50:36.151023 2722 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:50:36.152881 kubelet[2722]: I1002 18:50:36.152842 2722 server.go:660] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 18:50:36.154102 kubelet[2722]: I1002 18:50:36.154068 2722 container_manager_linux.go:262] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 18:50:36.154345 kubelet[2722]: I1002 18:50:36.153467 2722 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 18:50:36.154716 kubelet[2722]: I1002 18:50:36.154692 2722 container_manager_linux.go:267] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] ExperimentalCPUManagerPolicy:none ExperimentalCPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container ExperimentalCPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none} Oct 2 18:50:36.155098 kubelet[2722]: I1002 18:50:36.155075 2722 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 18:50:36.155226 kubelet[2722]: I1002 18:50:36.155202 2722 container_manager_linux.go:302] "Creating device plugin manager" devicePluginEnabled=true Oct 2 18:50:36.155460 kubelet[2722]: I1002 18:50:36.155436 2722 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:50:36.162583 kubelet[2722]: I1002 18:50:36.162546 2722 kubelet.go:381] "Attempting to sync node with API server" Oct 2 18:50:36.162818 kubelet[2722]: I1002 18:50:36.162794 2722 kubelet.go:270] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 18:50:36.162955 kubelet[2722]: I1002 18:50:36.162933 2722 kubelet.go:281] "Adding apiserver pod source" Oct 2 18:50:36.163074 kubelet[2722]: I1002 18:50:36.163054 2722 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 18:50:36.189079 kubelet[2722]: I1002 18:50:36.188900 2722 kuberuntime_manager.go:240] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 18:50:36.193273 kubelet[2722]: I1002 18:50:36.193236 2722 server.go:1175] "Started kubelet" Oct 2 18:50:36.198000 audit[2722]: AVC avc: denied { mac_admin } for pid=2722 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:36.201938 kubelet[2722]: I1002 18:50:36.201894 2722 server.go:155] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 18:50:36.203721 kubelet[2722]: I1002 18:50:36.203676 2722 server.go:438] "Adding debug handlers to kubelet server" Oct 2 18:50:36.198000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:36.198000 audit[2722]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000beef60 a1=4000a7f530 a2=4000beef30 a3=25 items=0 ppid=1 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:36.198000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:36.230464 kubelet[2722]: I1002 18:50:36.230412 2722 kubelet.go:1274] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 18:50:36.235000 audit[2722]: AVC avc: denied { mac_admin } for pid=2722 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:36.235000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:36.238621 kubelet[2722]: E1002 18:50:36.238568 2722 cri_stats_provider.go:452] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 18:50:36.238936 kubelet[2722]: E1002 18:50:36.238912 2722 kubelet.go:1317] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 18:50:36.235000 audit[2722]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d22020 a1=4000a7eb70 a2=4000bee000 a3=25 items=0 ppid=1 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:36.235000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:36.240146 kubelet[2722]: I1002 18:50:36.240120 2722 kubelet.go:1278] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 18:50:36.240406 kubelet[2722]: I1002 18:50:36.240385 2722 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 18:50:36.261015 kubelet[2722]: I1002 18:50:36.260964 2722 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 18:50:36.264002 kubelet[2722]: I1002 18:50:36.263962 2722 desired_state_of_world_populator.go:149] "Desired state populator starts to run" Oct 2 18:50:36.281000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=7112 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 18:50:36.281000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ec0a00 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:50:36.281000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:50:36.289365 kubelet[2722]: E1002 18:50:36.289322 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:36.383895 kubelet[2722]: I1002 18:50:36.381064 2722 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-16-86" Oct 2 18:50:36.403704 kubelet[2722]: I1002 18:50:36.403667 2722 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-16-86" Oct 2 18:50:36.404975 kubelet[2722]: I1002 18:50:36.404941 2722 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-16-86" Oct 2 18:50:36.513908 kubelet[2722]: I1002 18:50:36.513848 2722 cpu_manager.go:213] "Starting CPU manager" policy="none" Oct 2 18:50:36.514097 kubelet[2722]: I1002 18:50:36.514075 2722 cpu_manager.go:214] "Reconciling" reconcilePeriod="10s" Oct 2 18:50:36.514239 kubelet[2722]: I1002 18:50:36.514219 2722 state_mem.go:36] "Initialized new in-memory state store" Oct 2 18:50:36.514614 kubelet[2722]: I1002 18:50:36.514592 2722 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 18:50:36.514748 kubelet[2722]: I1002 18:50:36.514713 2722 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 18:50:36.514878 kubelet[2722]: I1002 18:50:36.514857 2722 policy_none.go:49] "None policy: Start" Oct 2 18:50:36.516471 kubelet[2722]: I1002 18:50:36.516437 2722 memory_manager.go:168] "Starting memorymanager" policy="None" Oct 2 18:50:36.516666 kubelet[2722]: I1002 18:50:36.516642 2722 state_mem.go:35] "Initializing new in-memory state store" Oct 2 18:50:36.517042 kubelet[2722]: I1002 18:50:36.517020 2722 state_mem.go:75] "Updated machine memory state" Oct 2 18:50:36.528473 kubelet[2722]: I1002 18:50:36.528439 2722 manager.go:447] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 18:50:36.527000 audit[2722]: AVC avc: denied { mac_admin } for pid=2722 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:36.527000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 18:50:36.527000 audit[2722]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40013fdfb0 a1=4001365a88 a2=40013fdf80 a3=25 items=0 ppid=1 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:36.527000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 18:50:36.531953 kubelet[2722]: I1002 18:50:36.531921 2722 server.go:86] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 18:50:36.533081 kubelet[2722]: I1002 18:50:36.533015 2722 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 18:50:36.625619 kubelet[2722]: I1002 18:50:36.625571 2722 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 18:50:36.700176 kubelet[2722]: I1002 18:50:36.698752 2722 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 18:50:36.700468 kubelet[2722]: I1002 18:50:36.700440 2722 status_manager.go:161] "Starting to sync pod status with apiserver" Oct 2 18:50:36.700862 kubelet[2722]: I1002 18:50:36.700839 2722 kubelet.go:2010] "Starting kubelet main sync loop" Oct 2 18:50:36.701048 kubelet[2722]: E1002 18:50:36.701029 2722 kubelet.go:2034] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 18:50:36.801527 kubelet[2722]: I1002 18:50:36.801474 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:36.801896 kubelet[2722]: I1002 18:50:36.801869 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:36.803108 kubelet[2722]: I1002 18:50:36.803075 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:36.876838 kubelet[2722]: I1002 18:50:36.876784 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2783febc4ab84443f56f0c9c1e790f34-ca-certs\") pod \"kube-apiserver-ip-172-31-16-86\" (UID: \"2783febc4ab84443f56f0c9c1e790f34\") " pod="kube-system/kube-apiserver-ip-172-31-16-86" Oct 2 18:50:36.877143 kubelet[2722]: I1002 18:50:36.877096 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2783febc4ab84443f56f0c9c1e790f34-k8s-certs\") pod \"kube-apiserver-ip-172-31-16-86\" (UID: \"2783febc4ab84443f56f0c9c1e790f34\") " pod="kube-system/kube-apiserver-ip-172-31-16-86" Oct 2 18:50:36.877442 kubelet[2722]: I1002 18:50:36.877401 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2ec68c491221fd50e23aa564a553d6f9-kubeconfig\") pod \"kube-scheduler-ip-172-31-16-86\" (UID: \"2ec68c491221fd50e23aa564a553d6f9\") " pod="kube-system/kube-scheduler-ip-172-31-16-86" Oct 2 18:50:36.877623 kubelet[2722]: I1002 18:50:36.877590 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2783febc4ab84443f56f0c9c1e790f34-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-16-86\" (UID: \"2783febc4ab84443f56f0c9c1e790f34\") " pod="kube-system/kube-apiserver-ip-172-31-16-86" Oct 2 18:50:36.877825 kubelet[2722]: I1002 18:50:36.877802 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-ca-certs\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:36.878201 kubelet[2722]: I1002 18:50:36.878146 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:36.878415 kubelet[2722]: I1002 18:50:36.878375 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-k8s-certs\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:36.878639 kubelet[2722]: I1002 18:50:36.878600 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-kubeconfig\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:36.878855 kubelet[2722]: I1002 18:50:36.878816 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c93b78e291050ed3824c08aaeabf5770-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-16-86\" (UID: \"c93b78e291050ed3824c08aaeabf5770\") " pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:37.131446 sudo[2732]: pam_unix(sudo:session): session closed for user root Oct 2 18:50:37.143155 kernel: kauditd_printk_skb: 284 callbacks suppressed Oct 2 18:50:37.143313 kernel: audit: type=1106 audit(1696272637.131:1010): pid=2732 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:37.131000 audit[2732]: USER_END pid=2732 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:37.133000 audit[2732]: CRED_DISP pid=2732 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:37.152550 kernel: audit: type=1104 audit(1696272637.133:1011): pid=2732 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:37.189123 kubelet[2722]: I1002 18:50:37.189055 2722 apiserver.go:52] "Watching apiserver" Oct 2 18:50:37.281444 kubelet[2722]: I1002 18:50:37.281390 2722 reconciler.go:169] "Reconciler: start to sync state" Oct 2 18:50:37.738837 kubelet[2722]: E1002 18:50:37.738781 2722 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-16-86\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-16-86" Oct 2 18:50:37.741093 kubelet[2722]: E1002 18:50:37.741040 2722 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-16-86\" already exists" pod="kube-system/kube-scheduler-ip-172-31-16-86" Oct 2 18:50:37.771811 kubelet[2722]: E1002 18:50:37.771763 2722 kubelet.go:1712] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-16-86\" already exists" pod="kube-system/kube-apiserver-ip-172-31-16-86" Oct 2 18:50:40.549708 sudo[1836]: pam_unix(sudo:session): session closed for user root Oct 2 18:50:40.548000 audit[1836]: USER_END pid=1836 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:40.548000 audit[1836]: CRED_DISP pid=1836 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:40.568666 kernel: audit: type=1106 audit(1696272640.548:1012): pid=1836 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:40.568783 kernel: audit: type=1104 audit(1696272640.548:1013): pid=1836 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 18:50:40.581282 sshd[1833]: pam_unix(sshd:session): session closed for user core Oct 2 18:50:40.582000 audit[1833]: USER_END pid=1833 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:40.587648 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 18:50:40.588039 systemd[1]: session-7.scope: Consumed 14.287s CPU time. Oct 2 18:50:40.588942 systemd[1]: sshd@6-172.31.16.86:22-139.178.89.65:37386.service: Deactivated successfully. Oct 2 18:50:40.582000 audit[1833]: CRED_DISP pid=1833 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:40.597782 kernel: audit: type=1106 audit(1696272640.582:1014): pid=1833 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:40.598425 systemd-logind[1567]: Session 7 logged out. Waiting for processes to exit. Oct 2 18:50:40.600186 systemd-logind[1567]: Removed session 7. Oct 2 18:50:40.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.86:22-139.178.89.65:37386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:40.616861 kernel: audit: type=1104 audit(1696272640.582:1015): pid=1833 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:50:40.616947 kernel: audit: type=1131 audit(1696272640.587:1016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.16.86:22-139.178.89.65:37386 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:50:41.534082 kubelet[2722]: E1002 18:50:41.534008 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:46.535305 kubelet[2722]: E1002 18:50:46.535268 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:48.635863 kubelet[2722]: I1002 18:50:48.635798 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:48.647869 systemd[1]: Created slice kubepods-besteffort-podf3083292_eaa6_4d86_8729_83c164eb0ad3.slice. Oct 2 18:50:48.653141 kubelet[2722]: I1002 18:50:48.653086 2722 kuberuntime_manager.go:1050] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 18:50:48.653920 env[1579]: time="2023-10-02T18:50:48.653852805Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 18:50:48.655394 kubelet[2722]: I1002 18:50:48.655359 2722 kubelet_network.go:60] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 18:50:48.656254 kubelet[2722]: E1002 18:50:48.656205 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:48.662493 kubelet[2722]: I1002 18:50:48.662416 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/f3083292-eaa6-4d86-8729-83c164eb0ad3-kube-proxy\") pod \"kube-proxy-77d5x\" (UID: \"f3083292-eaa6-4d86-8729-83c164eb0ad3\") " pod="kube-system/kube-proxy-77d5x" Oct 2 18:50:48.662691 kubelet[2722]: I1002 18:50:48.662505 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f3083292-eaa6-4d86-8729-83c164eb0ad3-xtables-lock\") pod \"kube-proxy-77d5x\" (UID: \"f3083292-eaa6-4d86-8729-83c164eb0ad3\") " pod="kube-system/kube-proxy-77d5x" Oct 2 18:50:48.662691 kubelet[2722]: I1002 18:50:48.662554 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f3083292-eaa6-4d86-8729-83c164eb0ad3-lib-modules\") pod \"kube-proxy-77d5x\" (UID: \"f3083292-eaa6-4d86-8729-83c164eb0ad3\") " pod="kube-system/kube-proxy-77d5x" Oct 2 18:50:48.662691 kubelet[2722]: I1002 18:50:48.662602 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2ljck\" (UniqueName: \"kubernetes.io/projected/f3083292-eaa6-4d86-8729-83c164eb0ad3-kube-api-access-2ljck\") pod \"kube-proxy-77d5x\" (UID: \"f3083292-eaa6-4d86-8729-83c164eb0ad3\") " pod="kube-system/kube-proxy-77d5x" Oct 2 18:50:48.764071 kubelet[2722]: I1002 18:50:48.764003 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:48.778442 systemd[1]: Created slice kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice. Oct 2 18:50:48.804819 kubelet[2722]: I1002 18:50:48.804756 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:50:48.814675 systemd[1]: Created slice kubepods-besteffort-pod817e41dc_3a52_4599_aaf0_7cf40ac6f93d.slice. Oct 2 18:50:48.871753 kubelet[2722]: I1002 18:50:48.871690 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-run\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.871927 kubelet[2722]: I1002 18:50:48.871809 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-bpf-maps\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.871927 kubelet[2722]: I1002 18:50:48.871885 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7ptxb\" (UniqueName: \"kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-kube-api-access-7ptxb\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872068 kubelet[2722]: I1002 18:50:48.871932 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-cgroup\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872068 kubelet[2722]: I1002 18:50:48.871976 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-lib-modules\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872068 kubelet[2722]: I1002 18:50:48.872031 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-hostproc\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872249 kubelet[2722]: I1002 18:50:48.872077 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-hubble-tls\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872249 kubelet[2722]: I1002 18:50:48.872139 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-cilium-config-path\") pod \"cilium-operator-69b677f97c-9rq92\" (UID: \"817e41dc-3a52-4599-aaf0-7cf40ac6f93d\") " pod="kube-system/cilium-operator-69b677f97c-9rq92" Oct 2 18:50:48.872249 kubelet[2722]: I1002 18:50:48.872181 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cni-path\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872249 kubelet[2722]: I1002 18:50:48.872227 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-etc-cni-netd\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872486 kubelet[2722]: I1002 18:50:48.872270 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-xtables-lock\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872486 kubelet[2722]: I1002 18:50:48.872314 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f07f720d-792d-435a-8452-fbe26470e49a-cilium-config-path\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872486 kubelet[2722]: I1002 18:50:48.872356 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f07f720d-792d-435a-8452-fbe26470e49a-clustermesh-secrets\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872486 kubelet[2722]: I1002 18:50:48.872402 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-kernel\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.872486 kubelet[2722]: I1002 18:50:48.872453 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8cgtt\" (UniqueName: \"kubernetes.io/projected/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-kube-api-access-8cgtt\") pod \"cilium-operator-69b677f97c-9rq92\" (UID: \"817e41dc-3a52-4599-aaf0-7cf40ac6f93d\") " pod="kube-system/cilium-operator-69b677f97c-9rq92" Oct 2 18:50:48.872813 kubelet[2722]: I1002 18:50:48.872500 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-net\") pod \"cilium-tc5jw\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " pod="kube-system/cilium-tc5jw" Oct 2 18:50:48.962870 env[1579]: time="2023-10-02T18:50:48.962688324Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-77d5x,Uid:f3083292-eaa6-4d86-8729-83c164eb0ad3,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:49.048791 env[1579]: time="2023-10-02T18:50:49.048339426Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:49.048791 env[1579]: time="2023-10-02T18:50:49.048416043Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:49.048791 env[1579]: time="2023-10-02T18:50:49.048441578Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:49.049123 env[1579]: time="2023-10-02T18:50:49.048839889Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2b51720053b7b6a10c4bb5e4202393a8cce33fcaa8b0494451e3bf199c3cad0e pid=2825 runtime=io.containerd.runc.v2 Oct 2 18:50:49.085914 systemd[1]: Started cri-containerd-2b51720053b7b6a10c4bb5e4202393a8cce33fcaa8b0494451e3bf199c3cad0e.scope. Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143493 kernel: audit: type=1400 audit(1696272649.127:1017): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143624 kernel: audit: type=1400 audit(1696272649.127:1018): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143676 kernel: audit: type=1400 audit(1696272649.127:1019): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.158979 kernel: audit: type=1400 audit(1696272649.127:1020): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.167102 kernel: audit: type=1400 audit(1696272649.127:1021): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.175159 kernel: audit: type=1400 audit(1696272649.127:1022): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.193724 kernel: audit: type=1400 audit(1696272649.127:1023): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.193860 kernel: audit: type=1400 audit(1696272649.127:1024): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.201746 kernel: audit: type=1400 audit(1696272649.127:1025): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.210083 kernel: audit: type=1400 audit(1696272649.127:1026): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.127000 audit: BPF prog-id=115 op=LOAD Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2825 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262353137323030353362376236613130633462623565343230323339 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2825 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262353137323030353362376236613130633462623565343230323339 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.131000 audit: BPF prog-id=116 op=LOAD Oct 2 18:50:49.131000 audit[2833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2825 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.131000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262353137323030353362376236613130633462623565343230323339 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.135000 audit: BPF prog-id=117 op=LOAD Oct 2 18:50:49.135000 audit[2833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2825 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262353137323030353362376236613130633462623565343230323339 Oct 2 18:50:49.143000 audit: BPF prog-id=117 op=UNLOAD Oct 2 18:50:49.143000 audit: BPF prog-id=116 op=UNLOAD Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { perfmon } for pid=2833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit[2833]: AVC avc: denied { bpf } for pid=2833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.143000 audit: BPF prog-id=118 op=LOAD Oct 2 18:50:49.143000 audit[2833]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2825 pid=2833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262353137323030353362376236613130633462623565343230323339 Oct 2 18:50:49.226147 env[1579]: time="2023-10-02T18:50:49.226085562Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-77d5x,Uid:f3083292-eaa6-4d86-8729-83c164eb0ad3,Namespace:kube-system,Attempt:0,} returns sandbox id \"2b51720053b7b6a10c4bb5e4202393a8cce33fcaa8b0494451e3bf199c3cad0e\"" Oct 2 18:50:49.235820 env[1579]: time="2023-10-02T18:50:49.235723397Z" level=info msg="CreateContainer within sandbox \"2b51720053b7b6a10c4bb5e4202393a8cce33fcaa8b0494451e3bf199c3cad0e\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 18:50:49.267802 env[1579]: time="2023-10-02T18:50:49.267713194Z" level=info msg="CreateContainer within sandbox \"2b51720053b7b6a10c4bb5e4202393a8cce33fcaa8b0494451e3bf199c3cad0e\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"62a6dd96fd2923d75b45a21edc1b9ccdb4c4d48b58e97527d56bd7d11f4ab17c\"" Oct 2 18:50:49.271262 env[1579]: time="2023-10-02T18:50:49.271165536Z" level=info msg="StartContainer for \"62a6dd96fd2923d75b45a21edc1b9ccdb4c4d48b58e97527d56bd7d11f4ab17c\"" Oct 2 18:50:49.317426 systemd[1]: Started cri-containerd-62a6dd96fd2923d75b45a21edc1b9ccdb4c4d48b58e97527d56bd7d11f4ab17c.scope. Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2825 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632613664643936666432393233643735623435613231656463316239 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.367000 audit: BPF prog-id=119 op=LOAD Oct 2 18:50:49.367000 audit[2867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2825 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632613664643936666432393233643735623435613231656463316239 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit: BPF prog-id=120 op=LOAD Oct 2 18:50:49.368000 audit[2867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2825 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632613664643936666432393233643735623435613231656463316239 Oct 2 18:50:49.368000 audit: BPF prog-id=120 op=UNLOAD Oct 2 18:50:49.368000 audit: BPF prog-id=119 op=UNLOAD Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { perfmon } for pid=2867 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit[2867]: AVC avc: denied { bpf } for pid=2867 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.368000 audit: BPF prog-id=121 op=LOAD Oct 2 18:50:49.368000 audit[2867]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2825 pid=2867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.368000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632613664643936666432393233643735623435613231656463316239 Oct 2 18:50:49.406683 env[1579]: time="2023-10-02T18:50:49.406598916Z" level=info msg="StartContainer for \"62a6dd96fd2923d75b45a21edc1b9ccdb4c4d48b58e97527d56bd7d11f4ab17c\" returns successfully" Oct 2 18:50:49.426190 env[1579]: time="2023-10-02T18:50:49.426136740Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-9rq92,Uid:817e41dc-3a52-4599-aaf0-7cf40ac6f93d,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:49.478183 env[1579]: time="2023-10-02T18:50:49.471252029Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:49.478183 env[1579]: time="2023-10-02T18:50:49.471331478Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:49.478183 env[1579]: time="2023-10-02T18:50:49.471358333Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:49.478596 env[1579]: time="2023-10-02T18:50:49.478116587Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869 pid=2901 runtime=io.containerd.runc.v2 Oct 2 18:50:49.521753 systemd[1]: Started cri-containerd-9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869.scope. Oct 2 18:50:49.550643 kernel: IPVS: Registered protocols (TCP, UDP, SCTP, AH, ESP) Oct 2 18:50:49.550848 kernel: IPVS: Connection hash table configured (size=4096, memory=32Kbytes) Oct 2 18:50:49.552587 kernel: IPVS: ipvs loaded. Oct 2 18:50:49.581796 kernel: IPVS: [rr] scheduler registered. Oct 2 18:50:49.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.590000 audit: BPF prog-id=122 op=LOAD Oct 2 18:50:49.592000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.592000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2901 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323333653639623965323337336332343930666338623530353036 Oct 2 18:50:49.592000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.592000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2901 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323333653639623965323337336332343930666338623530353036 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.593000 audit: BPF prog-id=123 op=LOAD Oct 2 18:50:49.593000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2901 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.593000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323333653639623965323337336332343930666338623530353036 Oct 2 18:50:49.597910 kernel: IPVS: [wrr] scheduler registered. Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.597000 audit: BPF prog-id=124 op=LOAD Oct 2 18:50:49.597000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2901 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323333653639623965323337336332343930666338623530353036 Oct 2 18:50:49.600000 audit: BPF prog-id=124 op=UNLOAD Oct 2 18:50:49.600000 audit: BPF prog-id=123 op=UNLOAD Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { perfmon } for pid=2910 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit[2910]: AVC avc: denied { bpf } for pid=2910 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.600000 audit: BPF prog-id=125 op=LOAD Oct 2 18:50:49.600000 audit[2910]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2901 pid=2910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962323333653639623965323337336332343930666338623530353036 Oct 2 18:50:49.615010 kernel: IPVS: [sh] scheduler registered. Oct 2 18:50:49.664028 env[1579]: time="2023-10-02T18:50:49.663948842Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-69b677f97c-9rq92,Uid:817e41dc-3a52-4599-aaf0-7cf40ac6f93d,Namespace:kube-system,Attempt:0,} returns sandbox id \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\"" Oct 2 18:50:49.667347 env[1579]: time="2023-10-02T18:50:49.667256746Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\"" Oct 2 18:50:49.686823 env[1579]: time="2023-10-02T18:50:49.686705906Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-tc5jw,Uid:f07f720d-792d-435a-8452-fbe26470e49a,Namespace:kube-system,Attempt:0,}" Oct 2 18:50:49.736147 env[1579]: time="2023-10-02T18:50:49.732050866Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:50:49.736147 env[1579]: time="2023-10-02T18:50:49.732182789Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:50:49.736147 env[1579]: time="2023-10-02T18:50:49.732210591Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:50:49.737460 env[1579]: time="2023-10-02T18:50:49.737302942Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239 pid=2964 runtime=io.containerd.runc.v2 Oct 2 18:50:49.782177 systemd[1]: Started cri-containerd-85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239.scope. Oct 2 18:50:49.813000 audit[2992]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=2992 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.813000 audit[2992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff9a1b6e0 a2=0 a3=ffffb30756c0 items=0 ppid=2877 pid=2992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:50:49.822000 audit[3000]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.822000 audit[3000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe669d4a0 a2=0 a3=ffff99be26c0 items=0 ppid=2877 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.822000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:50:49.826000 audit[2993]: NETFILTER_CFG table=mangle:61 family=10 entries=1 op=nft_register_chain pid=2993 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:49.826000 audit[2993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe10899a0 a2=0 a3=ffff9930a6c0 items=0 ppid=2877 pid=2993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 18:50:49.830000 audit[3003]: NETFILTER_CFG table=nat:62 family=10 entries=1 op=nft_register_chain pid=3003 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:49.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.834000 audit: BPF prog-id=126 op=LOAD Oct 2 18:50:49.834000 audit[3002]: NETFILTER_CFG table=filter:63 family=2 entries=1 op=nft_register_chain pid=3002 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.834000 audit[3002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdbce8be0 a2=0 a3=ffffafcb86c0 items=0 ppid=2877 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.834000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:50:49.830000 audit[3003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc17b400 a2=0 a3=ffff825336c0 items=0 ppid=2877 pid=3003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.830000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 18:50:49.836000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.836000 audit[2979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2964 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633961613538386534363263383933323236663962343763376333 Oct 2 18:50:49.837000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.837000 audit[2979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2964 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633961613538386534363263383933323236663962343763376333 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.839000 audit: BPF prog-id=127 op=LOAD Oct 2 18:50:49.839000 audit[2979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2964 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633961613538386534363263383933323236663962343763376333 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.841000 audit: BPF prog-id=128 op=LOAD Oct 2 18:50:49.841000 audit[2979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2964 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633961613538386534363263383933323236663962343763376333 Oct 2 18:50:49.844000 audit: BPF prog-id=128 op=UNLOAD Oct 2 18:50:49.844000 audit: BPF prog-id=127 op=UNLOAD Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { perfmon } for pid=2979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit[2979]: AVC avc: denied { bpf } for pid=2979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:49.848000 audit: BPF prog-id=129 op=LOAD Oct 2 18:50:49.850000 audit[3004]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=3004 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:49.850000 audit[3004]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe0805df0 a2=0 a3=ffffbe5d56c0 items=0 ppid=2877 pid=3004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 18:50:49.848000 audit[2979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2964 pid=2979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835633961613538386534363263383933323236663962343763376333 Oct 2 18:50:49.891000 audit[3005]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.891000 audit[3005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff222eed0 a2=0 a3=ffffbbd0c6c0 items=0 ppid=2877 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.891000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:50:49.906000 audit[3010]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3010 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.906000 audit[3010]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe652d4a0 a2=0 a3=ffff8de366c0 items=0 ppid=2877 pid=3010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.906000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 18:50:49.924902 env[1579]: time="2023-10-02T18:50:49.924835611Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-tc5jw,Uid:f07f720d-792d-435a-8452-fbe26470e49a,Namespace:kube-system,Attempt:0,} returns sandbox id \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\"" Oct 2 18:50:49.929000 audit[3018]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.929000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc63000a0 a2=0 a3=ffff921b96c0 items=0 ppid=2877 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.929000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 18:50:49.935000 audit[3019]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3019 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.935000 audit[3019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe9d38380 a2=0 a3=ffff9f93a6c0 items=0 ppid=2877 pid=3019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.935000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:50:49.944000 audit[3021]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3021 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.944000 audit[3021]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcb62fe30 a2=0 a3=ffff7fe976c0 items=0 ppid=2877 pid=3021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.944000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:50:49.948000 audit[3022]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3022 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.948000 audit[3022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcacc11e0 a2=0 a3=ffff885ef6c0 items=0 ppid=2877 pid=3022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.948000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:50:49.964000 audit[3024]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3024 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.964000 audit[3024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffceb5fe50 a2=0 a3=ffff8773e6c0 items=0 ppid=2877 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.964000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:50:49.977000 audit[3027]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3027 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.977000 audit[3027]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffcb00b10 a2=0 a3=ffffb2a496c0 items=0 ppid=2877 pid=3027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.977000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 18:50:49.981000 audit[3028]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3028 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.981000 audit[3028]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc5e0c30 a2=0 a3=ffffb5f3d6c0 items=0 ppid=2877 pid=3028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:50:49.997000 audit[3030]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3030 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:49.997000 audit[3030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdf695840 a2=0 a3=ffffb43826c0 items=0 ppid=2877 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:49.997000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:50:50.004000 audit[3031]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3031 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:50.004000 audit[3031]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc62aa3f0 a2=0 a3=ffff914296c0 items=0 ppid=2877 pid=3031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.004000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:50:50.014000 audit[3033]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3033 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:50.014000 audit[3033]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc28ba4c0 a2=0 a3=ffffb576d6c0 items=0 ppid=2877 pid=3033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.014000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:50:50.030000 audit[3036]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3036 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:50.030000 audit[3036]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1e34a50 a2=0 a3=ffffb2d846c0 items=0 ppid=2877 pid=3036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.030000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:50:50.045000 audit[3039]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3039 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:50.045000 audit[3039]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd6023a30 a2=0 a3=ffff8d3f36c0 items=0 ppid=2877 pid=3039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.045000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:50:50.049000 audit[3040]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:50.049000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc830d380 a2=0 a3=ffffaea716c0 items=0 ppid=2877 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.049000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:50:50.058000 audit[3042]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3042 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:50.058000 audit[3042]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=fffff82e4ff0 a2=0 a3=ffff868206c0 items=0 ppid=2877 pid=3042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.058000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:50.072000 audit[3045]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3045 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 18:50:50.072000 audit[3045]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcee52280 a2=0 a3=ffff9a5fa6c0 items=0 ppid=2877 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.072000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:50.106000 audit[3049]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3049 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:50:50.106000 audit[3049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4028 a0=3 a1=ffffd70e1570 a2=0 a3=ffffa324d6c0 items=0 ppid=2877 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.106000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:50.118000 audit[3049]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3049 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 18:50:50.118000 audit[3049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffd70e1570 a2=0 a3=ffffa324d6c0 items=0 ppid=2877 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.118000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:50.127000 audit[3052]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.127000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc1025950 a2=0 a3=ffffa44cf6c0 items=0 ppid=2877 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.127000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 18:50:50.136000 audit[3054]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3054 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.136000 audit[3054]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd4b1e240 a2=0 a3=ffff849ff6c0 items=0 ppid=2877 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.136000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 18:50:50.149000 audit[3057]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.149000 audit[3057]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc629f970 a2=0 a3=ffffab57e6c0 items=0 ppid=2877 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.149000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 18:50:50.154000 audit[3058]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.154000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe30c7da0 a2=0 a3=ffffaf0076c0 items=0 ppid=2877 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.154000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 18:50:50.164000 audit[3060]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3060 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.164000 audit[3060]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffddcbda90 a2=0 a3=ffffb08226c0 items=0 ppid=2877 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.164000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 18:50:50.169000 audit[3061]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3061 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.169000 audit[3061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff93f76d0 a2=0 a3=ffff873ff6c0 items=0 ppid=2877 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 18:50:50.179000 audit[3063]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3063 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.179000 audit[3063]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdf8fa920 a2=0 a3=ffffaf4736c0 items=0 ppid=2877 pid=3063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 18:50:50.193000 audit[3066]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3066 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.193000 audit[3066]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffffb148990 a2=0 a3=ffffbd7016c0 items=0 ppid=2877 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 18:50:50.198000 audit[3067]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.198000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffe6e1230 a2=0 a3=ffff85ec76c0 items=0 ppid=2877 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.198000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 18:50:50.207000 audit[3069]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3069 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.207000 audit[3069]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd026c880 a2=0 a3=ffffb24ad6c0 items=0 ppid=2877 pid=3069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.207000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 18:50:50.211000 audit[3070]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3070 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.211000 audit[3070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe20ed880 a2=0 a3=ffff995656c0 items=0 ppid=2877 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.211000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 18:50:50.221000 audit[3072]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3072 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.221000 audit[3072]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe0cb30b0 a2=0 a3=ffffa92d96c0 items=0 ppid=2877 pid=3072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.221000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 18:50:50.235000 audit[3075]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3075 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.235000 audit[3075]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff198a940 a2=0 a3=ffffbb4826c0 items=0 ppid=2877 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.235000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 18:50:50.248000 audit[3078]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3078 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.248000 audit[3078]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff84271d0 a2=0 a3=ffff9bcc06c0 items=0 ppid=2877 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.248000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 18:50:50.256000 audit[3079]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.256000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffc30e580 a2=0 a3=ffff8fff56c0 items=0 ppid=2877 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.256000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 18:50:50.266000 audit[3081]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3081 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.266000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff52be3c0 a2=0 a3=ffffbf4436c0 items=0 ppid=2877 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.266000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:50.280000 audit[3084]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3084 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 18:50:50.280000 audit[3084]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe849a9c0 a2=0 a3=ffff9072d6c0 items=0 ppid=2877 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.280000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 18:50:50.304000 audit[3088]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:50:50.304000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe2d8d050 a2=0 a3=ffffb1e0c6c0 items=0 ppid=2877 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.304000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:50.305000 audit[3088]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3088 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 18:50:50.305000 audit[3088]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1860 a0=3 a1=ffffe2d8d050 a2=0 a3=ffffb1e0c6c0 items=0 ppid=2877 pid=3088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:50.305000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 18:50:51.029424 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2283018618.mount: Deactivated successfully. Oct 2 18:50:51.536796 kubelet[2722]: E1002 18:50:51.536742 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:52.050788 env[1579]: time="2023-10-02T18:50:52.050704062Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:52.053630 env[1579]: time="2023-10-02T18:50:52.053576513Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e0bfc5d64e2c86e8497f9da5fbf169dc17a08c923bc75187d41ff880cb71c12f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:52.056329 env[1579]: time="2023-10-02T18:50:52.056257066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:50:52.057602 env[1579]: time="2023-10-02T18:50:52.057526635Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.1@sha256:93d5aaeda37d59e6c4325ff05030d7b48fabde6576478e3fdbfb9bb4a68ec4a1\" returns image reference \"sha256:e0bfc5d64e2c86e8497f9da5fbf169dc17a08c923bc75187d41ff880cb71c12f\"" Oct 2 18:50:52.061333 env[1579]: time="2023-10-02T18:50:52.060378267Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\"" Oct 2 18:50:52.064204 env[1579]: time="2023-10-02T18:50:52.064147759Z" level=info msg="CreateContainer within sandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 18:50:52.093144 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount586848349.mount: Deactivated successfully. Oct 2 18:50:52.107696 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount652264656.mount: Deactivated successfully. Oct 2 18:50:52.111068 env[1579]: time="2023-10-02T18:50:52.110981896Z" level=info msg="CreateContainer within sandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\"" Oct 2 18:50:52.114663 env[1579]: time="2023-10-02T18:50:52.114297336Z" level=info msg="StartContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\"" Oct 2 18:50:52.171056 systemd[1]: Started cri-containerd-0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295.scope. Oct 2 18:50:52.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.218000 audit: BPF prog-id=130 op=LOAD Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2901 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:52.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063363532626239393436663938376337366535626463623932663337 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2901 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:52.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063363532626239393436663938376337366535626463623932663337 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit: BPF prog-id=131 op=LOAD Oct 2 18:50:52.219000 audit[3097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2901 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:52.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063363532626239393436663938376337366535626463623932663337 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit: BPF prog-id=132 op=LOAD Oct 2 18:50:52.219000 audit[3097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2901 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:52.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063363532626239393436663938376337366535626463623932663337 Oct 2 18:50:52.219000 audit: BPF prog-id=132 op=UNLOAD Oct 2 18:50:52.219000 audit: BPF prog-id=131 op=UNLOAD Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { perfmon } for pid=3097 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit[3097]: AVC avc: denied { bpf } for pid=3097 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:50:52.219000 audit: BPF prog-id=133 op=LOAD Oct 2 18:50:52.219000 audit[3097]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2901 pid=3097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:50:52.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063363532626239393436663938376337366535626463623932663337 Oct 2 18:50:52.260121 env[1579]: time="2023-10-02T18:50:52.260053458Z" level=info msg="StartContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" returns successfully" Oct 2 18:50:52.337000 audit[3108]: AVC avc: denied { map_create } for pid=3108 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c1020 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c1020 tclass=bpf permissive=0 Oct 2 18:50:52.337000 audit[3108]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-13 a0=0 a1=40004ef768 a2=48 a3=0 items=0 ppid=2901 pid=3108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c1020 key=(null) Oct 2 18:50:52.337000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 18:50:56.538480 kubelet[2722]: E1002 18:50:56.538422 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:50:59.539240 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1943262303.mount: Deactivated successfully. Oct 2 18:51:01.540046 kubelet[2722]: E1002 18:51:01.539989 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:03.589993 env[1579]: time="2023-10-02T18:51:03.589931022Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:51:03.594685 env[1579]: time="2023-10-02T18:51:03.594594589Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4204f456d3e4a8a7ac29109cf66dfd9b53e82d3f2e8574599e358096d890b8db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:51:03.598212 env[1579]: time="2023-10-02T18:51:03.598122962Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 18:51:03.599698 env[1579]: time="2023-10-02T18:51:03.599646673Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b\" returns image reference \"sha256:4204f456d3e4a8a7ac29109cf66dfd9b53e82d3f2e8574599e358096d890b8db\"" Oct 2 18:51:03.605675 env[1579]: time="2023-10-02T18:51:03.605617197Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 18:51:03.638789 env[1579]: time="2023-10-02T18:51:03.634896974Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\"" Oct 2 18:51:03.639412 env[1579]: time="2023-10-02T18:51:03.639362855Z" level=info msg="StartContainer for \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\"" Oct 2 18:51:03.689474 systemd[1]: Started cri-containerd-32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2.scope. Oct 2 18:51:03.725075 systemd[1]: cri-containerd-32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2.scope: Deactivated successfully. Oct 2 18:51:03.736266 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2-rootfs.mount: Deactivated successfully. Oct 2 18:51:04.419603 env[1579]: time="2023-10-02T18:51:04.419536873Z" level=info msg="shim disconnected" id=32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2 Oct 2 18:51:04.420044 env[1579]: time="2023-10-02T18:51:04.419991642Z" level=warning msg="cleaning up after shim disconnected" id=32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2 namespace=k8s.io Oct 2 18:51:04.420184 env[1579]: time="2023-10-02T18:51:04.420155260Z" level=info msg="cleaning up dead shim" Oct 2 18:51:04.447678 env[1579]: time="2023-10-02T18:51:04.447608107Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:51:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3152 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:51:04Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:51:04.448465 env[1579]: time="2023-10-02T18:51:04.448315832Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 18:51:04.449216 env[1579]: time="2023-10-02T18:51:04.448656471Z" level=error msg="Failed to pipe stdout of container \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\"" error="reading from a closed fifo" Oct 2 18:51:04.449435 env[1579]: time="2023-10-02T18:51:04.448806924Z" level=error msg="Failed to pipe stderr of container \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\"" error="reading from a closed fifo" Oct 2 18:51:04.451392 env[1579]: time="2023-10-02T18:51:04.451303545Z" level=error msg="StartContainer for \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:51:04.451906 kubelet[2722]: E1002 18:51:04.451851 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2" Oct 2 18:51:04.454621 kubelet[2722]: E1002 18:51:04.452008 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:51:04.454621 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:51:04.454621 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:51:04.454621 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7ptxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:51:04.456146 kubelet[2722]: E1002 18:51:04.452068 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:04.841948 env[1579]: time="2023-10-02T18:51:04.841886731Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 18:51:04.871552 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3954377025.mount: Deactivated successfully. Oct 2 18:51:04.889010 env[1579]: time="2023-10-02T18:51:04.888931541Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\"" Oct 2 18:51:04.892534 env[1579]: time="2023-10-02T18:51:04.892479753Z" level=info msg="StartContainer for \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\"" Oct 2 18:51:04.951045 systemd[1]: Started cri-containerd-68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238.scope. Oct 2 18:51:04.994959 systemd[1]: cri-containerd-68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238.scope: Deactivated successfully. Oct 2 18:51:05.016010 env[1579]: time="2023-10-02T18:51:05.015941256Z" level=info msg="shim disconnected" id=68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238 Oct 2 18:51:05.016477 env[1579]: time="2023-10-02T18:51:05.016444864Z" level=warning msg="cleaning up after shim disconnected" id=68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238 namespace=k8s.io Oct 2 18:51:05.016635 env[1579]: time="2023-10-02T18:51:05.016606034Z" level=info msg="cleaning up dead shim" Oct 2 18:51:05.043470 env[1579]: time="2023-10-02T18:51:05.043404522Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:51:05Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3188 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:51:05Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:51:05.044198 env[1579]: time="2023-10-02T18:51:05.044118547Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 18:51:05.044865 env[1579]: time="2023-10-02T18:51:05.044715502Z" level=error msg="Failed to pipe stderr of container \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\"" error="reading from a closed fifo" Oct 2 18:51:05.045373 env[1579]: time="2023-10-02T18:51:05.044757022Z" level=error msg="Failed to pipe stdout of container \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\"" error="reading from a closed fifo" Oct 2 18:51:05.047281 env[1579]: time="2023-10-02T18:51:05.047217850Z" level=error msg="StartContainer for \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:51:05.047859 kubelet[2722]: E1002 18:51:05.047702 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238" Oct 2 18:51:05.048035 kubelet[2722]: E1002 18:51:05.047953 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:51:05.048035 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:51:05.048035 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:51:05.048035 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7ptxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:51:05.051301 kubelet[2722]: E1002 18:51:05.048016 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:05.838380 kubelet[2722]: I1002 18:51:05.838344 2722 scope.go:115] "RemoveContainer" containerID="32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2" Oct 2 18:51:05.839825 kubelet[2722]: I1002 18:51:05.839777 2722 scope.go:115] "RemoveContainer" containerID="32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2" Oct 2 18:51:05.843415 env[1579]: time="2023-10-02T18:51:05.842452486Z" level=info msg="RemoveContainer for \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\"" Oct 2 18:51:05.845269 env[1579]: time="2023-10-02T18:51:05.845205798Z" level=info msg="RemoveContainer for \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\"" Oct 2 18:51:05.845668 env[1579]: time="2023-10-02T18:51:05.845524573Z" level=error msg="RemoveContainer for \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\" failed" error="failed to set removing state for container \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\": container is already in removing state" Oct 2 18:51:05.846139 kubelet[2722]: E1002 18:51:05.846097 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\": container is already in removing state" containerID="32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2" Oct 2 18:51:05.846399 kubelet[2722]: E1002 18:51:05.846376 2722 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2": container is already in removing state; Skipping pod "cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)" Oct 2 18:51:05.846986 kubelet[2722]: E1002 18:51:05.846962 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:05.852949 env[1579]: time="2023-10-02T18:51:05.852879817Z" level=info msg="RemoveContainer for \"32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2\" returns successfully" Oct 2 18:51:05.859867 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238-rootfs.mount: Deactivated successfully. Oct 2 18:51:06.541216 kubelet[2722]: E1002 18:51:06.541167 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:06.844259 kubelet[2722]: E1002 18:51:06.844196 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:07.526808 kubelet[2722]: W1002 18:51:07.526713 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice/cri-containerd-32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2.scope WatchSource:0}: container "32af2928844295cc0fd9231fcca04216562ed1f80b8de66de9913f4f1a311aa2" in namespace "k8s.io": not found Oct 2 18:51:10.637475 kubelet[2722]: W1002 18:51:10.637396 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice/cri-containerd-68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238.scope WatchSource:0}: task 68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238 not found: not found Oct 2 18:51:11.542493 kubelet[2722]: E1002 18:51:11.542435 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:16.544488 kubelet[2722]: E1002 18:51:16.544421 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:21.546464 kubelet[2722]: E1002 18:51:21.546367 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:21.707014 env[1579]: time="2023-10-02T18:51:21.706696546Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 18:51:21.730234 env[1579]: time="2023-10-02T18:51:21.730170175Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\"" Oct 2 18:51:21.731159 env[1579]: time="2023-10-02T18:51:21.731112902Z" level=info msg="StartContainer for \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\"" Oct 2 18:51:21.783479 systemd[1]: Started cri-containerd-94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2.scope. Oct 2 18:51:21.837758 systemd[1]: cri-containerd-94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2.scope: Deactivated successfully. Oct 2 18:51:21.862163 env[1579]: time="2023-10-02T18:51:21.862079236Z" level=info msg="shim disconnected" id=94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2 Oct 2 18:51:21.862580 env[1579]: time="2023-10-02T18:51:21.862503398Z" level=warning msg="cleaning up after shim disconnected" id=94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2 namespace=k8s.io Oct 2 18:51:21.862846 env[1579]: time="2023-10-02T18:51:21.862810788Z" level=info msg="cleaning up dead shim" Oct 2 18:51:21.897992 env[1579]: time="2023-10-02T18:51:21.897922258Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:51:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3230 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:51:21Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:51:21.898671 env[1579]: time="2023-10-02T18:51:21.898593378Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 18:51:21.902033 env[1579]: time="2023-10-02T18:51:21.901947445Z" level=error msg="Failed to pipe stderr of container \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\"" error="reading from a closed fifo" Oct 2 18:51:21.902164 env[1579]: time="2023-10-02T18:51:21.901976820Z" level=error msg="Failed to pipe stdout of container \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\"" error="reading from a closed fifo" Oct 2 18:51:21.904448 env[1579]: time="2023-10-02T18:51:21.904374456Z" level=error msg="StartContainer for \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:51:21.907467 kubelet[2722]: E1002 18:51:21.905125 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2" Oct 2 18:51:21.907467 kubelet[2722]: E1002 18:51:21.905256 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:51:21.907467 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:51:21.907467 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:51:21.907879 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7ptxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:51:21.908041 kubelet[2722]: E1002 18:51:21.905312 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:22.720966 systemd[1]: run-containerd-runc-k8s.io-94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2-runc.rUyeIw.mount: Deactivated successfully. Oct 2 18:51:22.721134 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2-rootfs.mount: Deactivated successfully. Oct 2 18:51:22.888619 kubelet[2722]: I1002 18:51:22.888470 2722 scope.go:115] "RemoveContainer" containerID="68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238" Oct 2 18:51:22.889254 kubelet[2722]: I1002 18:51:22.889121 2722 scope.go:115] "RemoveContainer" containerID="68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238" Oct 2 18:51:22.891834 env[1579]: time="2023-10-02T18:51:22.891563215Z" level=info msg="RemoveContainer for \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\"" Oct 2 18:51:22.893791 env[1579]: time="2023-10-02T18:51:22.893690679Z" level=info msg="RemoveContainer for \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\"" Oct 2 18:51:22.894056 env[1579]: time="2023-10-02T18:51:22.893977792Z" level=error msg="RemoveContainer for \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\" failed" error="failed to set removing state for container \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\": container is already in removing state" Oct 2 18:51:22.894524 kubelet[2722]: E1002 18:51:22.894490 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\": container is already in removing state" containerID="68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238" Oct 2 18:51:22.894808 kubelet[2722]: E1002 18:51:22.894785 2722 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238": container is already in removing state; Skipping pod "cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)" Oct 2 18:51:22.896183 kubelet[2722]: E1002 18:51:22.895504 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:22.908109 env[1579]: time="2023-10-02T18:51:22.908048372Z" level=info msg="RemoveContainer for \"68f9285a2f6b787a27a8f9fc9e32834367264d8385e2b01236a26edd4e3a2238\" returns successfully" Oct 2 18:51:24.965299 kubelet[2722]: W1002 18:51:24.965249 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice/cri-containerd-94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2.scope WatchSource:0}: task 94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2 not found: not found Oct 2 18:51:26.547196 kubelet[2722]: E1002 18:51:26.547159 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:27.586000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:27.588830 kernel: kauditd_printk_skb: 396 callbacks suppressed Oct 2 18:51:27.588940 kernel: audit: type=1400 audit(1696272687.586:1140): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:27.586000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:27.608287 kernel: audit: type=1400 audit(1696272687.586:1141): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:27.608364 kernel: audit: type=1300 audit(1696272687.586:1141): arch=c00000b7 syscall=27 success=no exit=-13 a0=12 a1=4002258760 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:27.586000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=12 a1=4002258760 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:27.586000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:27.631173 kernel: audit: type=1327 audit(1696272687.586:1141): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:27.631261 kernel: audit: type=1300 audit(1696272687.586:1140): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=400234c510 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:27.586000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=400234c510 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:27.586000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:27.653926 kernel: audit: type=1327 audit(1696272687.586:1140): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:31.549165 kubelet[2722]: E1002 18:51:31.549127 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:31.835000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.835000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400be81c20 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:51:31.858601 kernel: audit: type=1400 audit(1696272691.835:1142): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.858705 kernel: audit: type=1300 audit(1696272691.835:1142): arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400be81c20 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:51:31.835000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:51:31.869862 kernel: audit: type=1327 audit(1696272691.835:1142): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:51:31.844000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.880301 kernel: audit: type=1400 audit(1696272691.844:1143): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.844000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400c24f590 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:51:31.844000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:51:31.858000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.858000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400c257020 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:51:31.858000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:51:31.858000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.858000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400be81c50 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:51:31.858000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:51:31.879000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.879000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400c257080 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:51:31.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:51:31.879000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:31.879000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=53 a1=400be81ce0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:51:31.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:51:34.989000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:34.992337 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 18:51:34.992469 kernel: audit: type=1400 audit(1696272694.989:1148): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:34.989000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4002259a00 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:35.015147 kernel: audit: type=1300 audit(1696272694.989:1148): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4002259a00 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:34.989000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:35.025890 kernel: audit: type=1327 audit(1696272694.989:1148): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:34.991000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:35.035620 kernel: audit: type=1400 audit(1696272694.991:1149): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:34.991000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001301400 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:34.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:35.058695 kernel: audit: type=1300 audit(1696272694.991:1149): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001301400 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:35.058888 kernel: audit: type=1327 audit(1696272694.991:1149): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:35.058974 kernel: audit: type=1400 audit(1696272694.993:1150): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:34.993000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:34.993000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001301540 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:35.081191 kernel: audit: type=1300 audit(1696272694.993:1150): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001301540 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:35.081318 kernel: audit: type=1327 audit(1696272694.993:1150): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:34.993000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:35.012000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:35.101414 kernel: audit: type=1400 audit(1696272695.012:1151): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:51:35.012000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001301580 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:51:35.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:51:36.551883 kubelet[2722]: E1002 18:51:36.551837 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:38.702601 kubelet[2722]: E1002 18:51:38.702558 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:40.702675 systemd[1]: Started sshd@7-172.31.16.86:22-139.178.89.65:59558.service. Oct 2 18:51:40.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.86:22-139.178.89.65:59558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:40.705810 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 18:51:40.705935 kernel: audit: type=1130 audit(1696272700.701:1152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.86:22-139.178.89.65:59558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:40.896000 audit[3246]: USER_ACCT pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.906751 sshd[3246]: Accepted publickey for core from 139.178.89.65 port 59558 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:51:40.908848 sshd[3246]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:51:40.903000 audit[3246]: CRED_ACQ pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.918755 kernel: audit: type=1101 audit(1696272700.896:1153): pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.918853 kernel: audit: type=1103 audit(1696272700.903:1154): pid=3246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.925216 kernel: audit: type=1006 audit(1696272700.903:1155): pid=3246 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 18:51:40.903000 audit[3246]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc961af30 a2=3 a3=1 items=0 ppid=1 pid=3246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:40.936985 kernel: audit: type=1300 audit(1696272700.903:1155): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc961af30 a2=3 a3=1 items=0 ppid=1 pid=3246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:40.903000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:40.940912 kernel: audit: type=1327 audit(1696272700.903:1155): proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:40.946215 systemd-logind[1567]: New session 8 of user core. Oct 2 18:51:40.950300 systemd[1]: Started session-8.scope. Oct 2 18:51:40.962000 audit[3246]: USER_START pid=3246 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.976780 kernel: audit: type=1105 audit(1696272700.962:1156): pid=3246 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.976000 audit[3248]: CRED_ACQ pid=3248 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:40.989762 kernel: audit: type=1103 audit(1696272700.976:1157): pid=3248 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:41.280194 sshd[3246]: pam_unix(sshd:session): session closed for user core Oct 2 18:51:41.281000 audit[3246]: USER_END pid=3246 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:41.281000 audit[3246]: CRED_DISP pid=3246 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:41.294983 systemd[1]: sshd@7-172.31.16.86:22-139.178.89.65:59558.service: Deactivated successfully. Oct 2 18:51:41.296198 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 18:51:41.298545 systemd-logind[1567]: Session 8 logged out. Waiting for processes to exit. Oct 2 18:51:41.301046 systemd-logind[1567]: Removed session 8. Oct 2 18:51:41.303586 kernel: audit: type=1106 audit(1696272701.281:1158): pid=3246 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:41.303880 kernel: audit: type=1104 audit(1696272701.281:1159): pid=3246 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:41.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.16.86:22-139.178.89.65:59558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:41.553652 kubelet[2722]: E1002 18:51:41.553597 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:46.555198 kubelet[2722]: E1002 18:51:46.555137 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:51.313878 systemd[1]: Started sshd@8-172.31.16.86:22-139.178.89.65:33558.service. Oct 2 18:51:51.326176 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:51:51.326306 kernel: audit: type=1130 audit(1696272711.314:1161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.86:22-139.178.89.65:33558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:51.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.86:22-139.178.89.65:33558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:51.492000 audit[3263]: USER_ACCT pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.494050 sshd[3263]: Accepted publickey for core from 139.178.89.65 port 33558 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:51:51.505820 kernel: audit: type=1101 audit(1696272711.492:1162): pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.505000 audit[3263]: CRED_ACQ pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.507795 sshd[3263]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:51:51.523581 kernel: audit: type=1103 audit(1696272711.505:1163): pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.523713 kernel: audit: type=1006 audit(1696272711.506:1164): pid=3263 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 18:51:51.506000 audit[3263]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbbe0d70 a2=3 a3=1 items=0 ppid=1 pid=3263 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:51.534394 kernel: audit: type=1300 audit(1696272711.506:1164): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffbbe0d70 a2=3 a3=1 items=0 ppid=1 pid=3263 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:51:51.506000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:51.538268 kernel: audit: type=1327 audit(1696272711.506:1164): proctitle=737368643A20636F7265205B707269765D Oct 2 18:51:51.544845 systemd-logind[1567]: New session 9 of user core. Oct 2 18:51:51.548045 systemd[1]: Started session-9.scope. Oct 2 18:51:51.557553 kubelet[2722]: E1002 18:51:51.557386 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:51.556000 audit[3263]: USER_START pid=3263 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.575766 kernel: audit: type=1105 audit(1696272711.556:1165): pid=3263 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.575963 kernel: audit: type=1103 audit(1696272711.573:1166): pid=3265 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.573000 audit[3265]: CRED_ACQ pid=3265 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.836111 sshd[3263]: pam_unix(sshd:session): session closed for user core Oct 2 18:51:51.837000 audit[3263]: USER_END pid=3263 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.851191 systemd[1]: sshd@8-172.31.16.86:22-139.178.89.65:33558.service: Deactivated successfully. Oct 2 18:51:51.852468 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 18:51:51.854805 systemd-logind[1567]: Session 9 logged out. Waiting for processes to exit. Oct 2 18:51:51.857304 systemd-logind[1567]: Removed session 9. Oct 2 18:51:51.837000 audit[3263]: CRED_DISP pid=3263 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.867415 kernel: audit: type=1106 audit(1696272711.837:1167): pid=3263 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.867559 kernel: audit: type=1104 audit(1696272711.837:1168): pid=3263 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:51:51.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.16.86:22-139.178.89.65:33558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:51:53.706883 env[1579]: time="2023-10-02T18:51:53.706615945Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 18:51:53.733051 env[1579]: time="2023-10-02T18:51:53.732970489Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\"" Oct 2 18:51:53.734225 env[1579]: time="2023-10-02T18:51:53.734164603Z" level=info msg="StartContainer for \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\"" Oct 2 18:51:53.784377 systemd[1]: Started cri-containerd-539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7.scope. Oct 2 18:51:53.825841 systemd[1]: cri-containerd-539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7.scope: Deactivated successfully. Oct 2 18:51:53.834570 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7-rootfs.mount: Deactivated successfully. Oct 2 18:51:53.846597 env[1579]: time="2023-10-02T18:51:53.846523438Z" level=info msg="shim disconnected" id=539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7 Oct 2 18:51:53.846938 env[1579]: time="2023-10-02T18:51:53.846602917Z" level=warning msg="cleaning up after shim disconnected" id=539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7 namespace=k8s.io Oct 2 18:51:53.846938 env[1579]: time="2023-10-02T18:51:53.846626198Z" level=info msg="cleaning up dead shim" Oct 2 18:51:53.872600 env[1579]: time="2023-10-02T18:51:53.872521114Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:51:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3298 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:51:53Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:51:53.873072 env[1579]: time="2023-10-02T18:51:53.872986058Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 18:51:53.873449 env[1579]: time="2023-10-02T18:51:53.873385708Z" level=error msg="Failed to pipe stdout of container \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\"" error="reading from a closed fifo" Oct 2 18:51:53.873617 env[1579]: time="2023-10-02T18:51:53.873522609Z" level=error msg="Failed to pipe stderr of container \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\"" error="reading from a closed fifo" Oct 2 18:51:53.875764 env[1579]: time="2023-10-02T18:51:53.875665632Z" level=error msg="StartContainer for \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:51:53.879436 kubelet[2722]: E1002 18:51:53.876156 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7" Oct 2 18:51:53.879436 kubelet[2722]: E1002 18:51:53.876338 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:51:53.879436 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:51:53.879436 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:51:53.881411 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7ptxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:51:53.881623 kubelet[2722]: E1002 18:51:53.876417 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:53.974765 kubelet[2722]: I1002 18:51:53.974606 2722 scope.go:115] "RemoveContainer" containerID="94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2" Oct 2 18:51:53.976672 kubelet[2722]: I1002 18:51:53.976633 2722 scope.go:115] "RemoveContainer" containerID="94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2" Oct 2 18:51:53.979952 env[1579]: time="2023-10-02T18:51:53.979416866Z" level=info msg="RemoveContainer for \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\"" Oct 2 18:51:53.983832 env[1579]: time="2023-10-02T18:51:53.981984320Z" level=info msg="RemoveContainer for \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\"" Oct 2 18:51:53.983832 env[1579]: time="2023-10-02T18:51:53.982143878Z" level=error msg="RemoveContainer for \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\" failed" error="failed to set removing state for container \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\": container is already in removing state" Oct 2 18:51:53.984113 kubelet[2722]: E1002 18:51:53.982463 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\": container is already in removing state" containerID="94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2" Oct 2 18:51:53.984113 kubelet[2722]: E1002 18:51:53.982518 2722 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2": container is already in removing state; Skipping pod "cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)" Oct 2 18:51:53.984113 kubelet[2722]: E1002 18:51:53.983165 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:51:53.990455 env[1579]: time="2023-10-02T18:51:53.990375890Z" level=info msg="RemoveContainer for \"94ba455b452387b4c903cf9febb463184161699b58be22526fe0749dedd018f2\" returns successfully" Oct 2 18:51:56.559332 kubelet[2722]: E1002 18:51:56.559298 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:51:56.954491 kubelet[2722]: W1002 18:51:56.954364 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice/cri-containerd-539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7.scope WatchSource:0}: task 539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7 not found: not found Oct 2 18:52:01.561806 kubelet[2722]: E1002 18:52:01.561749 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:01.868259 systemd[1]: Started sshd@9-172.31.16.86:22-139.178.89.65:58010.service. Oct 2 18:52:01.880598 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:52:01.880772 kernel: audit: type=1130 audit(1696272721.868:1170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.86:22-139.178.89.65:58010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:01.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.86:22-139.178.89.65:58010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:02.050000 audit[3313]: USER_ACCT pid=3313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.057175 sshd[3313]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:02.058413 sshd[3313]: Accepted publickey for core from 139.178.89.65 port 58010 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:02.053000 audit[3313]: CRED_ACQ pid=3313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.071380 kernel: audit: type=1101 audit(1696272722.050:1171): pid=3313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.071538 kernel: audit: type=1103 audit(1696272722.053:1172): pid=3313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.071621 kernel: audit: type=1006 audit(1696272722.053:1173): pid=3313 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 18:52:02.053000 audit[3313]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffab6b480 a2=3 a3=1 items=0 ppid=1 pid=3313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:02.088767 kernel: audit: type=1300 audit(1696272722.053:1173): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffab6b480 a2=3 a3=1 items=0 ppid=1 pid=3313 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:02.053000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:02.092643 kernel: audit: type=1327 audit(1696272722.053:1173): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:02.097387 systemd-logind[1567]: New session 10 of user core. Oct 2 18:52:02.099404 systemd[1]: Started session-10.scope. Oct 2 18:52:02.108000 audit[3313]: USER_START pid=3313 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.114000 audit[3315]: CRED_ACQ pid=3315 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.130219 kernel: audit: type=1105 audit(1696272722.108:1174): pid=3313 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.130399 kernel: audit: type=1103 audit(1696272722.114:1175): pid=3315 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.376311 sshd[3313]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:02.379000 audit[3313]: USER_END pid=3313 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.383805 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 18:52:02.385487 systemd[1]: sshd@9-172.31.16.86:22-139.178.89.65:58010.service: Deactivated successfully. Oct 2 18:52:02.380000 audit[3313]: CRED_DISP pid=3313 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.393292 systemd-logind[1567]: Session 10 logged out. Waiting for processes to exit. Oct 2 18:52:02.394991 systemd-logind[1567]: Removed session 10. Oct 2 18:52:02.401299 kernel: audit: type=1106 audit(1696272722.379:1176): pid=3313 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.401446 kernel: audit: type=1104 audit(1696272722.380:1177): pid=3313 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:02.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.16.86:22-139.178.89.65:58010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:05.702548 kubelet[2722]: E1002 18:52:05.702511 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:52:06.563368 kubelet[2722]: E1002 18:52:06.563332 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:11.564651 kubelet[2722]: E1002 18:52:11.564590 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:12.409857 systemd[1]: Started sshd@10-172.31.16.86:22-139.178.89.65:37678.service. Oct 2 18:52:12.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.86:22-139.178.89.65:37678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:12.414800 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:52:12.414917 kernel: audit: type=1130 audit(1696272732.409:1179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.86:22-139.178.89.65:37678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:12.598000 audit[3326]: USER_ACCT pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.599990 sshd[3326]: Accepted publickey for core from 139.178.89.65 port 37678 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:12.611796 kernel: audit: type=1101 audit(1696272732.598:1180): pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.613927 sshd[3326]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:12.612000 audit[3326]: CRED_ACQ pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.630448 kernel: audit: type=1103 audit(1696272732.612:1181): pid=3326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.630568 kernel: audit: type=1006 audit(1696272732.612:1182): pid=3326 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 18:52:12.612000 audit[3326]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2d7ce20 a2=3 a3=1 items=0 ppid=1 pid=3326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:12.640855 kernel: audit: type=1300 audit(1696272732.612:1182): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2d7ce20 a2=3 a3=1 items=0 ppid=1 pid=3326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:12.612000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:12.644790 kernel: audit: type=1327 audit(1696272732.612:1182): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:12.649373 systemd-logind[1567]: New session 11 of user core. Oct 2 18:52:12.651280 systemd[1]: Started session-11.scope. Oct 2 18:52:12.660000 audit[3326]: USER_START pid=3326 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.677660 kernel: audit: type=1105 audit(1696272732.660:1183): pid=3326 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.677836 kernel: audit: type=1103 audit(1696272732.675:1184): pid=3328 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.675000 audit[3328]: CRED_ACQ pid=3328 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.939932 sshd[3326]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:12.942000 audit[3326]: USER_END pid=3326 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.946866 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 18:52:12.948093 systemd[1]: sshd@10-172.31.16.86:22-139.178.89.65:37678.service: Deactivated successfully. Oct 2 18:52:12.957015 systemd-logind[1567]: Session 11 logged out. Waiting for processes to exit. Oct 2 18:52:12.942000 audit[3326]: CRED_DISP pid=3326 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.966292 kernel: audit: type=1106 audit(1696272732.942:1185): pid=3326 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.966470 kernel: audit: type=1104 audit(1696272732.942:1186): pid=3326 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:12.967576 systemd-logind[1567]: Removed session 11. Oct 2 18:52:12.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.16.86:22-139.178.89.65:37678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:16.566000 kubelet[2722]: E1002 18:52:16.565964 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:17.703607 kubelet[2722]: E1002 18:52:17.703566 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:52:21.568000 kubelet[2722]: E1002 18:52:21.567941 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:22.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.86:22-139.178.89.65:42696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:22.970143 systemd[1]: Started sshd@11-172.31.16.86:22-139.178.89.65:42696.service. Oct 2 18:52:22.972679 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:52:22.972783 kernel: audit: type=1130 audit(1696272742.968:1188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.86:22-139.178.89.65:42696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:23.158000 audit[3340]: USER_ACCT pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.160313 sshd[3340]: Accepted publickey for core from 139.178.89.65 port 42696 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:23.171800 kernel: audit: type=1101 audit(1696272743.158:1189): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.171000 audit[3340]: CRED_ACQ pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.178501 sshd[3340]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:23.188888 kernel: audit: type=1103 audit(1696272743.171:1190): pid=3340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.188983 kernel: audit: type=1006 audit(1696272743.176:1191): pid=3340 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 18:52:23.176000 audit[3340]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc5885a0 a2=3 a3=1 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:23.176000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:23.200378 systemd[1]: Started session-12.scope. Oct 2 18:52:23.204276 kernel: audit: type=1300 audit(1696272743.176:1191): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdc5885a0 a2=3 a3=1 items=0 ppid=1 pid=3340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:23.204416 kernel: audit: type=1327 audit(1696272743.176:1191): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:23.201392 systemd-logind[1567]: New session 12 of user core. Oct 2 18:52:23.210000 audit[3340]: USER_START pid=3340 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.216000 audit[3342]: CRED_ACQ pid=3342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.225334 kernel: audit: type=1105 audit(1696272743.210:1192): pid=3340 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.225417 kernel: audit: type=1103 audit(1696272743.216:1193): pid=3342 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.476908 sshd[3340]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:23.477000 audit[3340]: USER_END pid=3340 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.477000 audit[3340]: CRED_DISP pid=3340 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.491558 systemd[1]: sshd@11-172.31.16.86:22-139.178.89.65:42696.service: Deactivated successfully. Oct 2 18:52:23.493148 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 18:52:23.500703 kernel: audit: type=1106 audit(1696272743.477:1194): pid=3340 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.500873 kernel: audit: type=1104 audit(1696272743.477:1195): pid=3340 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:23.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.16.86:22-139.178.89.65:42696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:23.502434 systemd-logind[1567]: Session 12 logged out. Waiting for processes to exit. Oct 2 18:52:23.505200 systemd-logind[1567]: Removed session 12. Oct 2 18:52:26.570315 kubelet[2722]: E1002 18:52:26.570260 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:27.586000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:27.586000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000d4bb60 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:52:27.586000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:27.589000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:27.589000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40009b8120 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:52:27.589000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:31.572007 kubelet[2722]: E1002 18:52:31.571953 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:31.837000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.840109 kernel: kauditd_printk_skb: 7 callbacks suppressed Oct 2 18:52:31.840215 kernel: audit: type=1400 audit(1696272751.837:1199): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.837000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c3baed0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.862646 kernel: audit: type=1300 audit(1696272751.837:1199): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c3baed0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.862804 kernel: audit: type=1327 audit(1696272751.837:1199): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.837000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.849000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.883441 kernel: audit: type=1400 audit(1696272751.849:1200): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.883581 kernel: audit: type=1300 audit(1696272751.849:1200): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c3baff0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.849000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c3baff0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.849000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.906286 kernel: audit: type=1327 audit(1696272751.849:1200): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.906362 kernel: audit: type=1400 audit(1696272751.858:1201): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.858000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.858000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4002ce1760 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.928065 kernel: audit: type=1300 audit(1696272751.858:1201): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4002ce1760 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.928176 kernel: audit: type=1327 audit(1696272751.858:1201): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.858000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.859000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.948431 kernel: audit: type=1400 audit(1696272751.859:1202): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.859000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c3cc930 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.859000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.879000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.879000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4002ce1880 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.879000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:31.881000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:31.881000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c3bb080 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:52:31.881000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:52:32.703030 kubelet[2722]: E1002 18:52:32.702978 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:52:33.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.86:22-139.178.89.65:36132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:33.508713 systemd[1]: Started sshd@12-172.31.16.86:22-139.178.89.65:36132.service. Oct 2 18:52:33.690000 audit[3352]: USER_ACCT pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:33.692855 sshd[3352]: Accepted publickey for core from 139.178.89.65 port 36132 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:33.692000 audit[3352]: CRED_ACQ pid=3352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:33.693000 audit[3352]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe972d6f0 a2=3 a3=1 items=0 ppid=1 pid=3352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:33.693000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:33.695045 sshd[3352]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:33.703571 systemd-logind[1567]: New session 13 of user core. Oct 2 18:52:33.705197 systemd[1]: Started session-13.scope. Oct 2 18:52:33.720000 audit[3352]: USER_START pid=3352 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:33.726000 audit[3354]: CRED_ACQ pid=3354 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:33.990091 sshd[3352]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:33.991000 audit[3352]: USER_END pid=3352 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:33.992000 audit[3352]: CRED_DISP pid=3352 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:33.996000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.16.86:22-139.178.89.65:36132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:33.996152 systemd-logind[1567]: Session 13 logged out. Waiting for processes to exit. Oct 2 18:52:33.996567 systemd[1]: sshd@12-172.31.16.86:22-139.178.89.65:36132.service: Deactivated successfully. Oct 2 18:52:33.998014 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 18:52:33.999983 systemd-logind[1567]: Removed session 13. Oct 2 18:52:34.991000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:34.991000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c018c0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:52:34.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:34.991000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:34.991000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=12 a1=4000c01900 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:52:34.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:34.994000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:34.994000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000da2de0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:52:34.994000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:35.013000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:52:35.013000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000da2e60 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:52:35.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:52:36.573509 kubelet[2722]: E1002 18:52:36.573420 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:41.574656 kubelet[2722]: E1002 18:52:41.574618 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:44.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.86:22-139.178.89.65:57074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:44.020437 systemd[1]: Started sshd@13-172.31.16.86:22-139.178.89.65:57074.service. Oct 2 18:52:44.023753 kernel: kauditd_printk_skb: 31 callbacks suppressed Oct 2 18:52:44.023858 kernel: audit: type=1130 audit(1696272764.019:1218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.86:22-139.178.89.65:57074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:44.201000 audit[3366]: USER_ACCT pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.202570 sshd[3366]: Accepted publickey for core from 139.178.89.65 port 57074 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:44.214785 kernel: audit: type=1101 audit(1696272764.201:1219): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.215959 sshd[3366]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:44.214000 audit[3366]: CRED_ACQ pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.232655 kernel: audit: type=1103 audit(1696272764.214:1220): pid=3366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.232820 kernel: audit: type=1006 audit(1696272764.214:1221): pid=3366 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 18:52:44.214000 audit[3366]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0cf9460 a2=3 a3=1 items=0 ppid=1 pid=3366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:44.240638 systemd[1]: Started session-14.scope. Oct 2 18:52:44.243350 kernel: audit: type=1300 audit(1696272764.214:1221): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0cf9460 a2=3 a3=1 items=0 ppid=1 pid=3366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:44.243513 systemd-logind[1567]: New session 14 of user core. Oct 2 18:52:44.214000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:44.248895 kernel: audit: type=1327 audit(1696272764.214:1221): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:44.253000 audit[3366]: USER_START pid=3366 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.259000 audit[3368]: CRED_ACQ pid=3368 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.265762 kernel: audit: type=1105 audit(1696272764.253:1222): pid=3366 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.275776 kernel: audit: type=1103 audit(1696272764.259:1223): pid=3368 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.520212 sshd[3366]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:44.521000 audit[3366]: USER_END pid=3366 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.526560 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 18:52:44.527827 systemd[1]: sshd@13-172.31.16.86:22-139.178.89.65:57074.service: Deactivated successfully. Oct 2 18:52:44.521000 audit[3366]: CRED_DISP pid=3366 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.543972 kernel: audit: type=1106 audit(1696272764.521:1224): pid=3366 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.544105 kernel: audit: type=1104 audit(1696272764.521:1225): pid=3366 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:44.543988 systemd-logind[1567]: Session 14 logged out. Waiting for processes to exit. Oct 2 18:52:44.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.16.86:22-139.178.89.65:57074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:44.545612 systemd-logind[1567]: Removed session 14. Oct 2 18:52:46.576793 kubelet[2722]: E1002 18:52:46.576757 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:46.706524 env[1579]: time="2023-10-02T18:52:46.706068895Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 18:52:46.733683 env[1579]: time="2023-10-02T18:52:46.733596019Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\"" Oct 2 18:52:46.736340 env[1579]: time="2023-10-02T18:52:46.735142696Z" level=info msg="StartContainer for \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\"" Oct 2 18:52:46.791980 systemd[1]: run-containerd-runc-k8s.io-dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8-runc.D7ZbY3.mount: Deactivated successfully. Oct 2 18:52:46.800493 systemd[1]: Started cri-containerd-dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8.scope. Oct 2 18:52:46.835465 systemd[1]: cri-containerd-dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8.scope: Deactivated successfully. Oct 2 18:52:46.861335 env[1579]: time="2023-10-02T18:52:46.861264447Z" level=info msg="shim disconnected" id=dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8 Oct 2 18:52:46.861665 env[1579]: time="2023-10-02T18:52:46.861630704Z" level=warning msg="cleaning up after shim disconnected" id=dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8 namespace=k8s.io Oct 2 18:52:46.861862 env[1579]: time="2023-10-02T18:52:46.861833099Z" level=info msg="cleaning up dead shim" Oct 2 18:52:46.888220 env[1579]: time="2023-10-02T18:52:46.888153402Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:52:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3404 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:52:46Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:52:46.888934 env[1579]: time="2023-10-02T18:52:46.888853372Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 18:52:46.889441 env[1579]: time="2023-10-02T18:52:46.889372691Z" level=error msg="Failed to pipe stderr of container \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\"" error="reading from a closed fifo" Oct 2 18:52:46.889529 env[1579]: time="2023-10-02T18:52:46.889475088Z" level=error msg="Failed to pipe stdout of container \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\"" error="reading from a closed fifo" Oct 2 18:52:46.892257 env[1579]: time="2023-10-02T18:52:46.892192645Z" level=error msg="StartContainer for \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:52:46.893767 kubelet[2722]: E1002 18:52:46.892704 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8" Oct 2 18:52:46.893767 kubelet[2722]: E1002 18:52:46.892907 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:52:46.893767 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:52:46.893767 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:52:46.894325 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7ptxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:52:46.894513 kubelet[2722]: E1002 18:52:46.892991 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:52:47.103154 kubelet[2722]: I1002 18:52:47.101889 2722 scope.go:115] "RemoveContainer" containerID="539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7" Oct 2 18:52:47.104207 kubelet[2722]: I1002 18:52:47.104163 2722 scope.go:115] "RemoveContainer" containerID="539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7" Oct 2 18:52:47.107561 env[1579]: time="2023-10-02T18:52:47.107502944Z" level=info msg="RemoveContainer for \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\"" Oct 2 18:52:47.117523 env[1579]: time="2023-10-02T18:52:47.117451005Z" level=info msg="RemoveContainer for \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\"" Oct 2 18:52:47.118030 env[1579]: time="2023-10-02T18:52:47.117965380Z" level=error msg="RemoveContainer for \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\" failed" error="failed to set removing state for container \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\": container is already in removing state" Oct 2 18:52:47.119821 kubelet[2722]: E1002 18:52:47.118774 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\": container is already in removing state" containerID="539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7" Oct 2 18:52:47.119821 kubelet[2722]: E1002 18:52:47.118839 2722 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7": container is already in removing state; Skipping pod "cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)" Oct 2 18:52:47.119821 kubelet[2722]: E1002 18:52:47.119267 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:52:47.122278 env[1579]: time="2023-10-02T18:52:47.122222941Z" level=info msg="RemoveContainer for \"539d7df916c22a7eb50c5d32d4e075a20870c66bb1c0a39d70626d2c0e2603b7\" returns successfully" Oct 2 18:52:47.721273 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8-rootfs.mount: Deactivated successfully. Oct 2 18:52:49.966604 kubelet[2722]: W1002 18:52:49.966557 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice/cri-containerd-dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8.scope WatchSource:0}: task dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8 not found: not found Oct 2 18:52:51.579135 kubelet[2722]: E1002 18:52:51.579091 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:52:54.553613 systemd[1]: Started sshd@14-172.31.16.86:22-139.178.89.65:42250.service. Oct 2 18:52:54.565578 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:52:54.565748 kernel: audit: type=1130 audit(1696272774.553:1227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.86:22-139.178.89.65:42250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:54.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.86:22-139.178.89.65:42250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:54.739000 audit[3420]: USER_ACCT pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:54.743325 sshd[3420]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:52:54.744957 sshd[3420]: Accepted publickey for core from 139.178.89.65 port 42250 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:52:54.741000 audit[3420]: CRED_ACQ pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:54.759744 kernel: audit: type=1101 audit(1696272774.739:1228): pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:54.759895 kernel: audit: type=1103 audit(1696272774.741:1229): pid=3420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:54.766043 kernel: audit: type=1006 audit(1696272774.741:1230): pid=3420 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 18:52:54.741000 audit[3420]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd00298a0 a2=3 a3=1 items=0 ppid=1 pid=3420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:54.776718 kernel: audit: type=1300 audit(1696272774.741:1230): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd00298a0 a2=3 a3=1 items=0 ppid=1 pid=3420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:52:54.780622 kernel: audit: type=1327 audit(1696272774.741:1230): proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:54.741000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:52:54.782190 systemd[1]: Started session-15.scope. Oct 2 18:52:54.783483 systemd-logind[1567]: New session 15 of user core. Oct 2 18:52:54.792000 audit[3420]: USER_START pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:54.798000 audit[3422]: CRED_ACQ pid=3422 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:54.813367 kernel: audit: type=1105 audit(1696272774.792:1231): pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:54.813553 kernel: audit: type=1103 audit(1696272774.798:1232): pid=3422 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:55.062077 sshd[3420]: pam_unix(sshd:session): session closed for user core Oct 2 18:52:55.063000 audit[3420]: USER_END pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:55.068047 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 18:52:55.069519 systemd[1]: sshd@14-172.31.16.86:22-139.178.89.65:42250.service: Deactivated successfully. Oct 2 18:52:55.064000 audit[3420]: CRED_DISP pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:55.084948 kernel: audit: type=1106 audit(1696272775.063:1233): pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:55.085075 kernel: audit: type=1104 audit(1696272775.064:1234): pid=3420 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:52:55.085153 systemd-logind[1567]: Session 15 logged out. Waiting for processes to exit. Oct 2 18:52:55.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.16.86:22-139.178.89.65:42250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:52:55.087029 systemd-logind[1567]: Removed session 15. Oct 2 18:52:56.580309 kubelet[2722]: E1002 18:52:56.580244 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:01.581409 kubelet[2722]: E1002 18:53:01.581362 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:01.701987 kubelet[2722]: E1002 18:53:01.701951 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:53:05.096579 systemd[1]: Started sshd@15-172.31.16.86:22-139.178.89.65:34234.service. Oct 2 18:53:05.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.86:22-139.178.89.65:34234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:05.104774 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:53:05.104894 kernel: audit: type=1130 audit(1696272785.096:1236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.86:22-139.178.89.65:34234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:05.280000 audit[3433]: USER_ACCT pid=3433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.281518 sshd[3433]: Accepted publickey for core from 139.178.89.65 port 34234 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:05.292836 kernel: audit: type=1101 audit(1696272785.280:1237): pid=3433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.293000 audit[3433]: CRED_ACQ pid=3433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.295411 sshd[3433]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:05.311449 kernel: audit: type=1103 audit(1696272785.293:1238): pid=3433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.311575 kernel: audit: type=1006 audit(1696272785.293:1239): pid=3433 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 18:53:05.311628 kernel: audit: type=1300 audit(1696272785.293:1239): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd59f23b0 a2=3 a3=1 items=0 ppid=1 pid=3433 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:05.293000 audit[3433]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd59f23b0 a2=3 a3=1 items=0 ppid=1 pid=3433 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:05.310692 systemd[1]: Started session-16.scope. Oct 2 18:53:05.313201 systemd-logind[1567]: New session 16 of user core. Oct 2 18:53:05.293000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:05.324234 kernel: audit: type=1327 audit(1696272785.293:1239): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:05.325000 audit[3433]: USER_START pid=3433 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.332000 audit[3435]: CRED_ACQ pid=3435 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.346453 kernel: audit: type=1105 audit(1696272785.325:1240): pid=3433 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.346572 kernel: audit: type=1103 audit(1696272785.332:1241): pid=3435 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.607116 sshd[3433]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:05.608000 audit[3433]: USER_END pid=3433 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.613197 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 18:53:05.614429 systemd[1]: sshd@15-172.31.16.86:22-139.178.89.65:34234.service: Deactivated successfully. Oct 2 18:53:05.609000 audit[3433]: CRED_DISP pid=3433 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.621778 kernel: audit: type=1106 audit(1696272785.608:1242): pid=3433 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.622015 systemd-logind[1567]: Session 16 logged out. Waiting for processes to exit. Oct 2 18:53:05.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.16.86:22-139.178.89.65:34234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:05.632772 kernel: audit: type=1104 audit(1696272785.609:1243): pid=3433 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:05.633188 systemd-logind[1567]: Removed session 16. Oct 2 18:53:06.582861 kubelet[2722]: E1002 18:53:06.582804 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:11.584334 kubelet[2722]: E1002 18:53:11.584299 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:12.702111 kubelet[2722]: E1002 18:53:12.702066 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:53:15.639419 systemd[1]: Started sshd@16-172.31.16.86:22-139.178.89.65:54446.service. Oct 2 18:53:15.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.86:22-139.178.89.65:54446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:15.646804 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:53:15.646923 kernel: audit: type=1130 audit(1696272795.639:1245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.86:22-139.178.89.65:54446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:15.820000 audit[3445]: USER_ACCT pid=3445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:15.824968 sshd[3445]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:15.826173 sshd[3445]: Accepted publickey for core from 139.178.89.65 port 54446 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:15.823000 audit[3445]: CRED_ACQ pid=3445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:15.842637 kernel: audit: type=1101 audit(1696272795.820:1246): pid=3445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:15.842885 kernel: audit: type=1103 audit(1696272795.823:1247): pid=3445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:15.850921 kernel: audit: type=1006 audit(1696272795.823:1248): pid=3445 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 18:53:15.851056 kernel: audit: type=1300 audit(1696272795.823:1248): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0febf10 a2=3 a3=1 items=0 ppid=1 pid=3445 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:15.823000 audit[3445]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0febf10 a2=3 a3=1 items=0 ppid=1 pid=3445 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:15.849417 systemd[1]: Started session-17.scope. Oct 2 18:53:15.852811 systemd-logind[1567]: New session 17 of user core. Oct 2 18:53:15.870765 kernel: audit: type=1327 audit(1696272795.823:1248): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:15.870893 kernel: audit: type=1105 audit(1696272795.863:1249): pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:15.823000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:15.863000 audit[3445]: USER_START pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:15.871000 audit[3447]: CRED_ACQ pid=3447 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:15.889268 kernel: audit: type=1103 audit(1696272795.871:1250): pid=3447 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.135087 sshd[3445]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:16.136000 audit[3445]: USER_END pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.141547 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 18:53:16.142966 systemd[1]: sshd@16-172.31.16.86:22-139.178.89.65:54446.service: Deactivated successfully. Oct 2 18:53:16.149569 systemd-logind[1567]: Session 17 logged out. Waiting for processes to exit. Oct 2 18:53:16.138000 audit[3445]: CRED_DISP pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.159643 kernel: audit: type=1106 audit(1696272796.136:1251): pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.159835 kernel: audit: type=1104 audit(1696272796.138:1252): pid=3445 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.16.86:22-139.178.89.65:54446 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:16.170071 systemd-logind[1567]: Removed session 17. Oct 2 18:53:16.173319 systemd[1]: Started sshd@17-172.31.16.86:22-139.178.89.65:46060.service. Oct 2 18:53:16.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.86:22-139.178.89.65:46060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:16.356000 audit[3458]: USER_ACCT pid=3458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.357525 sshd[3458]: Accepted publickey for core from 139.178.89.65 port 46060 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:16.359000 audit[3458]: CRED_ACQ pid=3458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.359000 audit[3458]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb180f50 a2=3 a3=1 items=0 ppid=1 pid=3458 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:16.359000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:16.361467 sshd[3458]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:16.370279 systemd-logind[1567]: New session 18 of user core. Oct 2 18:53:16.371200 systemd[1]: Started session-18.scope. Oct 2 18:53:16.380000 audit[3458]: USER_START pid=3458 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.387000 audit[3460]: CRED_ACQ pid=3460 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:16.587876 kubelet[2722]: E1002 18:53:16.587689 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:18.222691 sshd[3458]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:18.224000 audit[3458]: USER_END pid=3458 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.224000 audit[3458]: CRED_DISP pid=3458 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.229419 systemd[1]: sshd@17-172.31.16.86:22-139.178.89.65:46060.service: Deactivated successfully. Oct 2 18:53:18.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.16.86:22-139.178.89.65:46060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:18.231344 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 18:53:18.233300 systemd-logind[1567]: Session 18 logged out. Waiting for processes to exit. Oct 2 18:53:18.235286 systemd-logind[1567]: Removed session 18. Oct 2 18:53:18.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.86:22-139.178.89.65:46074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:18.252202 systemd[1]: Started sshd@18-172.31.16.86:22-139.178.89.65:46074.service. Oct 2 18:53:18.431000 audit[3468]: USER_ACCT pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.432838 sshd[3468]: Accepted publickey for core from 139.178.89.65 port 46074 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:18.434000 audit[3468]: CRED_ACQ pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.435000 audit[3468]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea64cd30 a2=3 a3=1 items=0 ppid=1 pid=3468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:18.435000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:18.436850 sshd[3468]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:18.446655 systemd[1]: Started session-19.scope. Oct 2 18:53:18.447031 systemd-logind[1567]: New session 19 of user core. Oct 2 18:53:18.457000 audit[3468]: USER_START pid=3468 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.463000 audit[3470]: CRED_ACQ pid=3470 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.730576 sshd[3468]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:18.731000 audit[3468]: USER_END pid=3468 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.732000 audit[3468]: CRED_DISP pid=3468 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:18.736300 systemd-logind[1567]: Session 19 logged out. Waiting for processes to exit. Oct 2 18:53:18.736892 systemd[1]: sshd@18-172.31.16.86:22-139.178.89.65:46074.service: Deactivated successfully. Oct 2 18:53:18.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.16.86:22-139.178.89.65:46074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:18.738493 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 18:53:18.740348 systemd-logind[1567]: Removed session 19. Oct 2 18:53:21.589647 kubelet[2722]: E1002 18:53:21.589592 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:24.702287 kubelet[2722]: E1002 18:53:24.702244 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:53:26.590997 kubelet[2722]: E1002 18:53:26.590923 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:27.589000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:27.592633 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 18:53:27.592790 kernel: audit: type=1400 audit(1696272807.589:1272): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:27.589000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4002337300 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:27.615529 kernel: audit: type=1300 audit(1696272807.589:1272): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4002337300 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:27.589000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:27.626460 kernel: audit: type=1327 audit(1696272807.589:1272): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:27.591000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:27.636852 kernel: audit: type=1400 audit(1696272807.591:1273): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:27.591000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40023857a0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:27.649934 kernel: audit: type=1300 audit(1696272807.591:1273): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40023857a0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:27.591000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:27.660916 kernel: audit: type=1327 audit(1696272807.591:1273): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:28.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.86:22-139.178.89.65:40798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:28.762224 systemd[1]: Started sshd@19-172.31.16.86:22-139.178.89.65:40798.service. Oct 2 18:53:28.772783 kernel: audit: type=1130 audit(1696272808.761:1274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.86:22-139.178.89.65:40798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:28.947343 sshd[3481]: Accepted publickey for core from 139.178.89.65 port 40798 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:28.946000 audit[3481]: USER_ACCT pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.952872 sshd[3481]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:28.951000 audit[3481]: CRED_ACQ pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.967497 kernel: audit: type=1101 audit(1696272808.946:1275): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.967644 kernel: audit: type=1103 audit(1696272808.951:1276): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.967778 kernel: audit: type=1006 audit(1696272808.951:1277): pid=3481 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 18:53:28.951000 audit[3481]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe0202110 a2=3 a3=1 items=0 ppid=1 pid=3481 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:28.951000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:28.979981 systemd[1]: Started session-20.scope. Oct 2 18:53:28.981172 systemd-logind[1567]: New session 20 of user core. Oct 2 18:53:28.990000 audit[3481]: USER_START pid=3481 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:28.996000 audit[3483]: CRED_ACQ pid=3483 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:29.256407 sshd[3481]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:29.257000 audit[3481]: USER_END pid=3481 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:29.257000 audit[3481]: CRED_DISP pid=3481 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:29.263528 systemd[1]: sshd@19-172.31.16.86:22-139.178.89.65:40798.service: Deactivated successfully. Oct 2 18:53:29.264047 systemd-logind[1567]: Session 20 logged out. Waiting for processes to exit. Oct 2 18:53:29.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.16.86:22-139.178.89.65:40798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:29.265342 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 18:53:29.267121 systemd-logind[1567]: Removed session 20. Oct 2 18:53:31.593524 kubelet[2722]: E1002 18:53:31.593471 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:31.838000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:31.838000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c81cff0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:53:31.838000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:53:31.850000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:31.850000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c81d020 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:53:31.850000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:53:31.859000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:31.859000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=401168fd40 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:53:31.859000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:53:31.859000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:31.859000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=57 a1=400c99e1b0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:53:31.859000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:53:31.880000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:31.880000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=40116e08a0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:53:31.880000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:53:31.882000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:31.882000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=400c99e270 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:53:31.882000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:53:34.992000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:34.995077 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 18:53:34.995168 kernel: audit: type=1400 audit(1696272814.992:1289): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:34.992000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4002337f40 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:35.017804 kernel: audit: type=1300 audit(1696272814.992:1289): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4002337f40 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:35.017954 kernel: audit: type=1327 audit(1696272814.992:1289): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:34.992000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:34.992000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:35.038850 kernel: audit: type=1400 audit(1696272814.992:1290): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:35.038946 kernel: audit: type=1300 audit(1696272814.992:1290): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40023f5ca0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:34.992000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40023f5ca0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:34.992000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:35.062764 kernel: audit: type=1327 audit(1696272814.992:1290): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:35.062840 kernel: audit: type=1400 audit(1696272814.996:1291): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:34.996000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:34.996000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40023f5de0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:35.086103 kernel: audit: type=1300 audit(1696272814.996:1291): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40023f5de0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:35.086194 kernel: audit: type=1327 audit(1696272814.996:1291): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:34.996000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:35.013000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:35.106854 kernel: audit: type=1400 audit(1696272815.013:1292): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:53:35.013000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40025ea180 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:53:35.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:53:35.703158 kubelet[2722]: E1002 18:53:35.703121 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:53:36.594972 kubelet[2722]: E1002 18:53:36.594938 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:39.286579 systemd[1]: Started sshd@20-172.31.16.86:22-139.178.89.65:41140.service. Oct 2 18:53:39.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.86:22-139.178.89.65:41140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:39.463000 audit[3494]: USER_ACCT pid=3494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.464087 sshd[3494]: Accepted publickey for core from 139.178.89.65 port 41140 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:39.465000 audit[3494]: CRED_ACQ pid=3494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.466000 audit[3494]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc35c9b30 a2=3 a3=1 items=0 ppid=1 pid=3494 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:39.466000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:39.467575 sshd[3494]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:39.477265 systemd[1]: Started session-21.scope. Oct 2 18:53:39.478073 systemd-logind[1567]: New session 21 of user core. Oct 2 18:53:39.487000 audit[3494]: USER_START pid=3494 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.493000 audit[3496]: CRED_ACQ pid=3496 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.749258 sshd[3494]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:39.750000 audit[3494]: USER_END pid=3494 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.750000 audit[3494]: CRED_DISP pid=3494 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:39.755679 systemd[1]: sshd@20-172.31.16.86:22-139.178.89.65:41140.service: Deactivated successfully. Oct 2 18:53:39.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.16.86:22-139.178.89.65:41140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:39.757154 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 18:53:39.758340 systemd-logind[1567]: Session 21 logged out. Waiting for processes to exit. Oct 2 18:53:39.759842 systemd-logind[1567]: Removed session 21. Oct 2 18:53:41.596331 kubelet[2722]: E1002 18:53:41.596287 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:46.598613 kubelet[2722]: E1002 18:53:46.598558 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:48.704674 kubelet[2722]: E1002 18:53:48.704628 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:53:49.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.86:22-139.178.89.65:36890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:49.781004 systemd[1]: Started sshd@21-172.31.16.86:22-139.178.89.65:36890.service. Oct 2 18:53:49.783448 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 18:53:49.783520 kernel: audit: type=1130 audit(1696272829.780:1302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.86:22-139.178.89.65:36890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:49.962000 audit[3506]: USER_ACCT pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.963515 sshd[3506]: Accepted publickey for core from 139.178.89.65 port 36890 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:53:49.967411 sshd[3506]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:53:49.965000 audit[3506]: CRED_ACQ pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.977026 systemd[1]: Started session-22.scope. Oct 2 18:53:49.978510 systemd-logind[1567]: New session 22 of user core. Oct 2 18:53:49.983101 kernel: audit: type=1101 audit(1696272829.962:1303): pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.983221 kernel: audit: type=1103 audit(1696272829.965:1304): pid=3506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.990753 kernel: audit: type=1006 audit(1696272829.966:1305): pid=3506 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 18:53:49.966000 audit[3506]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe04528a0 a2=3 a3=1 items=0 ppid=1 pid=3506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:50.002369 kernel: audit: type=1300 audit(1696272829.966:1305): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe04528a0 a2=3 a3=1 items=0 ppid=1 pid=3506 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:53:49.966000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:49.991000 audit[3506]: USER_START pid=3506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:50.017595 kernel: audit: type=1327 audit(1696272829.966:1305): proctitle=737368643A20636F7265205B707269765D Oct 2 18:53:50.017755 kernel: audit: type=1105 audit(1696272829.991:1306): pid=3506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:49.998000 audit[3510]: CRED_ACQ pid=3510 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:50.027118 kernel: audit: type=1103 audit(1696272829.998:1307): pid=3510 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:50.262095 sshd[3506]: pam_unix(sshd:session): session closed for user core Oct 2 18:53:50.263000 audit[3506]: USER_END pid=3506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:50.276702 systemd[1]: sshd@21-172.31.16.86:22-139.178.89.65:36890.service: Deactivated successfully. Oct 2 18:53:50.263000 audit[3506]: CRED_DISP pid=3506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:50.286426 kernel: audit: type=1106 audit(1696272830.263:1308): pid=3506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:50.286553 kernel: audit: type=1104 audit(1696272830.263:1309): pid=3506 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:53:50.278042 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 18:53:50.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.16.86:22-139.178.89.65:36890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:53:50.287574 systemd-logind[1567]: Session 22 logged out. Waiting for processes to exit. Oct 2 18:53:50.289360 systemd-logind[1567]: Removed session 22. Oct 2 18:53:51.600286 kubelet[2722]: E1002 18:53:51.600221 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:53:56.601160 kubelet[2722]: E1002 18:53:56.601109 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:00.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.86:22-139.178.89.65:39750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:00.293447 systemd[1]: Started sshd@22-172.31.16.86:22-139.178.89.65:39750.service. Oct 2 18:54:00.296810 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:54:00.296922 kernel: audit: type=1130 audit(1696272840.293:1311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.86:22-139.178.89.65:39750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:00.475000 audit[3519]: USER_ACCT pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.477036 sshd[3519]: Accepted publickey for core from 139.178.89.65 port 39750 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:00.488801 kernel: audit: type=1101 audit(1696272840.475:1312): pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.488000 audit[3519]: CRED_ACQ pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.490831 sshd[3519]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:00.506194 kernel: audit: type=1103 audit(1696272840.488:1313): pid=3519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.506327 kernel: audit: type=1006 audit(1696272840.489:1314): pid=3519 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 18:54:00.489000 audit[3519]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaa84bd0 a2=3 a3=1 items=0 ppid=1 pid=3519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:00.517190 kernel: audit: type=1300 audit(1696272840.489:1314): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdaa84bd0 a2=3 a3=1 items=0 ppid=1 pid=3519 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:00.489000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:00.521116 kernel: audit: type=1327 audit(1696272840.489:1314): proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:00.525835 systemd-logind[1567]: New session 23 of user core. Oct 2 18:54:00.527533 systemd[1]: Started session-23.scope. Oct 2 18:54:00.536000 audit[3519]: USER_START pid=3519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.550466 kernel: audit: type=1105 audit(1696272840.536:1315): pid=3519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.550571 kernel: audit: type=1103 audit(1696272840.549:1316): pid=3521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.549000 audit[3521]: CRED_ACQ pid=3521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.814089 sshd[3519]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:00.815000 audit[3519]: USER_END pid=3519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.828362 systemd[1]: sshd@22-172.31.16.86:22-139.178.89.65:39750.service: Deactivated successfully. Oct 2 18:54:00.829647 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 18:54:00.816000 audit[3519]: CRED_DISP pid=3519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.840159 kernel: audit: type=1106 audit(1696272840.815:1317): pid=3519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.840290 kernel: audit: type=1104 audit(1696272840.816:1318): pid=3519 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:00.831944 systemd-logind[1567]: Session 23 logged out. Waiting for processes to exit. Oct 2 18:54:00.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.16.86:22-139.178.89.65:39750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:00.833462 systemd-logind[1567]: Removed session 23. Oct 2 18:54:01.602160 kubelet[2722]: E1002 18:54:01.602103 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:01.703062 kubelet[2722]: E1002 18:54:01.703025 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:54:06.603968 kubelet[2722]: E1002 18:54:06.603929 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:10.845713 systemd[1]: Started sshd@23-172.31.16.86:22-139.178.89.65:36682.service. Oct 2 18:54:10.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.86:22-139.178.89.65:36682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:10.852832 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:54:10.852949 kernel: audit: type=1130 audit(1696272850.845:1320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.86:22-139.178.89.65:36682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:11.034000 audit[3530]: USER_ACCT pid=3530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.036203 sshd[3530]: Accepted publickey for core from 139.178.89.65 port 36682 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:11.047782 kernel: audit: type=1101 audit(1696272851.034:1321): pid=3530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.049622 sshd[3530]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:11.047000 audit[3530]: CRED_ACQ pid=3530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.066563 kernel: audit: type=1103 audit(1696272851.047:1322): pid=3530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.066720 kernel: audit: type=1006 audit(1696272851.047:1323): pid=3530 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 18:54:11.047000 audit[3530]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbc103e0 a2=3 a3=1 items=0 ppid=1 pid=3530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:11.072242 systemd[1]: Started session-24.scope. Oct 2 18:54:11.074825 systemd-logind[1567]: New session 24 of user core. Oct 2 18:54:11.077983 kernel: audit: type=1300 audit(1696272851.047:1323): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcbc103e0 a2=3 a3=1 items=0 ppid=1 pid=3530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:11.047000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:11.081967 kernel: audit: type=1327 audit(1696272851.047:1323): proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:11.085000 audit[3530]: USER_START pid=3530 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.092000 audit[3532]: CRED_ACQ pid=3532 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.099959 kernel: audit: type=1105 audit(1696272851.085:1324): pid=3530 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.109805 kernel: audit: type=1103 audit(1696272851.092:1325): pid=3532 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.367991 sshd[3530]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:11.369000 audit[3530]: USER_END pid=3530 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.369000 audit[3530]: CRED_DISP pid=3530 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.383309 systemd[1]: sshd@23-172.31.16.86:22-139.178.89.65:36682.service: Deactivated successfully. Oct 2 18:54:11.384541 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 18:54:11.386865 systemd-logind[1567]: Session 24 logged out. Waiting for processes to exit. Oct 2 18:54:11.388811 systemd-logind[1567]: Removed session 24. Oct 2 18:54:11.392298 kernel: audit: type=1106 audit(1696272851.369:1326): pid=3530 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.392426 kernel: audit: type=1104 audit(1696272851.369:1327): pid=3530 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:11.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.16.86:22-139.178.89.65:36682 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:11.605971 kubelet[2722]: E1002 18:54:11.605922 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:15.707669 env[1579]: time="2023-10-02T18:54:15.705456706Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 18:54:15.723536 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2899359788.mount: Deactivated successfully. Oct 2 18:54:15.735269 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount376923497.mount: Deactivated successfully. Oct 2 18:54:15.739091 env[1579]: time="2023-10-02T18:54:15.739003664Z" level=info msg="CreateContainer within sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\"" Oct 2 18:54:15.739958 env[1579]: time="2023-10-02T18:54:15.739911335Z" level=info msg="StartContainer for \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\"" Oct 2 18:54:15.787591 systemd[1]: Started cri-containerd-ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921.scope. Oct 2 18:54:15.829322 systemd[1]: cri-containerd-ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921.scope: Deactivated successfully. Oct 2 18:54:15.845221 env[1579]: time="2023-10-02T18:54:15.845153120Z" level=info msg="shim disconnected" id=ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921 Oct 2 18:54:15.845692 env[1579]: time="2023-10-02T18:54:15.845647701Z" level=warning msg="cleaning up after shim disconnected" id=ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921 namespace=k8s.io Oct 2 18:54:15.845859 env[1579]: time="2023-10-02T18:54:15.845830685Z" level=info msg="cleaning up dead shim" Oct 2 18:54:15.871845 env[1579]: time="2023-10-02T18:54:15.871778754Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3564 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:54:15Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:54:15.872533 env[1579]: time="2023-10-02T18:54:15.872458635Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 18:54:15.875905 env[1579]: time="2023-10-02T18:54:15.875843062Z" level=error msg="Failed to pipe stdout of container \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\"" error="reading from a closed fifo" Oct 2 18:54:15.876177 env[1579]: time="2023-10-02T18:54:15.876132304Z" level=error msg="Failed to pipe stderr of container \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\"" error="reading from a closed fifo" Oct 2 18:54:15.878499 env[1579]: time="2023-10-02T18:54:15.878432208Z" level=error msg="StartContainer for \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:54:15.879199 kubelet[2722]: E1002 18:54:15.879141 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921" Oct 2 18:54:15.879811 kubelet[2722]: E1002 18:54:15.879297 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:54:15.879811 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:54:15.879811 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:54:15.879811 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-7ptxb,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:54:15.880188 kubelet[2722]: E1002 18:54:15.879355 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:54:16.320882 kubelet[2722]: I1002 18:54:16.320848 2722 scope.go:115] "RemoveContainer" containerID="dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8" Oct 2 18:54:16.321796 kubelet[2722]: I1002 18:54:16.321747 2722 scope.go:115] "RemoveContainer" containerID="dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8" Oct 2 18:54:16.325402 env[1579]: time="2023-10-02T18:54:16.325009378Z" level=info msg="RemoveContainer for \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\"" Oct 2 18:54:16.325809 env[1579]: time="2023-10-02T18:54:16.325762937Z" level=info msg="RemoveContainer for \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\"" Oct 2 18:54:16.326112 env[1579]: time="2023-10-02T18:54:16.326047331Z" level=error msg="RemoveContainer for \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\" failed" error="failed to set removing state for container \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\": container is already in removing state" Oct 2 18:54:16.326493 kubelet[2722]: E1002 18:54:16.326463 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\": container is already in removing state" containerID="dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8" Oct 2 18:54:16.326718 kubelet[2722]: I1002 18:54:16.326694 2722 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8} err="rpc error: code = Unknown desc = failed to set removing state for container \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\": container is already in removing state" Oct 2 18:54:16.332361 env[1579]: time="2023-10-02T18:54:16.332299876Z" level=info msg="RemoveContainer for \"dc30a3cf20efdb4896b0e5f7e322abf615e3c53c777ce53885a933f1dd4dc5f8\" returns successfully" Oct 2 18:54:16.333498 kubelet[2722]: E1002 18:54:16.333463 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:54:16.606869 kubelet[2722]: E1002 18:54:16.606713 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:16.717028 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921-rootfs.mount: Deactivated successfully. Oct 2 18:54:18.959510 kubelet[2722]: W1002 18:54:18.959462 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice/cri-containerd-ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921.scope WatchSource:0}: task ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921 not found: not found Oct 2 18:54:21.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.86:22-139.178.89.65:49326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:21.398516 systemd[1]: Started sshd@24-172.31.16.86:22-139.178.89.65:49326.service. Oct 2 18:54:21.400949 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:54:21.401028 kernel: audit: type=1130 audit(1696272861.398:1329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.86:22-139.178.89.65:49326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:21.583000 audit[3580]: USER_ACCT pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.585564 sshd[3580]: Accepted publickey for core from 139.178.89.65 port 49326 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:21.595780 kernel: audit: type=1101 audit(1696272861.583:1330): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.596000 audit[3580]: CRED_ACQ pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.598497 sshd[3580]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:21.608863 kubelet[2722]: E1002 18:54:21.608660 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:21.613423 kernel: audit: type=1103 audit(1696272861.596:1331): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.613529 kernel: audit: type=1006 audit(1696272861.597:1332): pid=3580 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 18:54:21.597000 audit[3580]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc96e82f0 a2=3 a3=1 items=0 ppid=1 pid=3580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:21.623811 kernel: audit: type=1300 audit(1696272861.597:1332): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc96e82f0 a2=3 a3=1 items=0 ppid=1 pid=3580 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:21.597000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:21.627902 kernel: audit: type=1327 audit(1696272861.597:1332): proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:21.633578 systemd-logind[1567]: New session 25 of user core. Oct 2 18:54:21.635698 systemd[1]: Started session-25.scope. Oct 2 18:54:21.644000 audit[3580]: USER_START pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.659649 kernel: audit: type=1105 audit(1696272861.644:1333): pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.659805 kernel: audit: type=1103 audit(1696272861.657:1334): pid=3582 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.657000 audit[3582]: CRED_ACQ pid=3582 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.913087 sshd[3580]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:21.914000 audit[3580]: USER_END pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.916000 audit[3580]: CRED_DISP pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.927302 systemd[1]: sshd@24-172.31.16.86:22-139.178.89.65:49326.service: Deactivated successfully. Oct 2 18:54:21.928527 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 18:54:21.935989 kernel: audit: type=1106 audit(1696272861.914:1335): pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.936091 kernel: audit: type=1104 audit(1696272861.916:1336): pid=3580 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:21.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.16.86:22-139.178.89.65:49326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:21.937141 systemd-logind[1567]: Session 25 logged out. Waiting for processes to exit. Oct 2 18:54:21.939041 systemd-logind[1567]: Removed session 25. Oct 2 18:54:26.610070 kubelet[2722]: E1002 18:54:26.610026 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:26.702973 kubelet[2722]: E1002 18:54:26.702933 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:54:27.591000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:27.593993 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:54:27.594073 kernel: audit: type=1400 audit(1696272867.591:1338): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:27.591000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000671a40 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:27.616057 kernel: audit: type=1300 audit(1696272867.591:1338): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000671a40 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:27.616174 kernel: audit: type=1327 audit(1696272867.591:1338): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:27.591000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:27.592000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:27.636263 kernel: audit: type=1400 audit(1696272867.592:1339): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:27.636363 kernel: audit: type=1300 audit(1696272867.592:1339): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000f32570 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:27.592000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000f32570 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:27.592000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:27.659156 kernel: audit: type=1327 audit(1696272867.592:1339): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:31.611403 kubelet[2722]: E1002 18:54:31.611355 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:31.840000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.840000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4010b47530 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:54:31.863952 kernel: audit: type=1400 audit(1696272871.840:1340): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.864055 kernel: audit: type=1300 audit(1696272871.840:1340): arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4010b47530 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:54:31.864109 kernel: audit: type=1327 audit(1696272871.840:1340): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:54:31.840000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:54:31.851000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.884875 kernel: audit: type=1400 audit(1696272871.851:1341): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.851000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4010b47560 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:54:31.851000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:54:31.860000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.860000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4010b47590 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:54:31.860000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:54:31.860000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.860000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003e344a0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:54:31.860000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:54:31.882000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.882000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4003e34500 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:54:31.882000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:54:31.883000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:31.883000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=50 a1=4010b47680 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:54:31.883000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:54:31.944165 systemd[1]: Started sshd@25-172.31.16.86:22-139.178.89.65:57110.service. Oct 2 18:54:31.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.16.86:22-139.178.89.65:57110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:32.125000 audit[3591]: USER_ACCT pid=3591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:32.127208 sshd[3591]: Accepted publickey for core from 139.178.89.65 port 57110 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:32.129000 audit[3591]: CRED_ACQ pid=3591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:32.129000 audit[3591]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcad70a10 a2=3 a3=1 items=0 ppid=1 pid=3591 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:32.129000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:32.131227 sshd[3591]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:32.138829 systemd-logind[1567]: New session 26 of user core. Oct 2 18:54:32.140802 systemd[1]: Started session-26.scope. Oct 2 18:54:32.151000 audit[3591]: USER_START pid=3591 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:32.157000 audit[3593]: CRED_ACQ pid=3593 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:32.420528 sshd[3591]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:32.423000 audit[3591]: USER_END pid=3591 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:32.423000 audit[3591]: CRED_DISP pid=3591 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:32.426959 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 18:54:32.428265 systemd-logind[1567]: Session 26 logged out. Waiting for processes to exit. Oct 2 18:54:32.428660 systemd[1]: sshd@25-172.31.16.86:22-139.178.89.65:57110.service: Deactivated successfully. Oct 2 18:54:32.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.16.86:22-139.178.89.65:57110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:32.431294 systemd-logind[1567]: Removed session 26. Oct 2 18:54:34.994000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:34.996864 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 18:54:34.996925 kernel: audit: type=1400 audit(1696272874.994:1355): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:34.993000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:35.016207 kernel: audit: type=1400 audit(1696272874.993:1356): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:35.016312 kernel: audit: type=1300 audit(1696272874.994:1355): arch=c00000b7 syscall=27 success=no exit=-13 a0=12 a1=4001089800 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:34.994000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=12 a1=4001089800 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:34.994000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:35.039334 kernel: audit: type=1327 audit(1696272874.994:1355): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:35.039482 kernel: audit: type=1300 audit(1696272874.993:1356): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c9b400 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:34.993000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c9b400 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:34.993000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:35.062173 kernel: audit: type=1327 audit(1696272874.993:1356): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:35.062238 kernel: audit: type=1400 audit(1696272874.997:1357): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:34.997000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:34.997000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c9b440 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:35.084249 kernel: audit: type=1300 audit(1696272874.997:1357): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c9b440 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:35.084351 kernel: audit: type=1327 audit(1696272874.997:1357): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:34.997000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:35.015000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:35.104244 kernel: audit: type=1400 audit(1696272875.015:1358): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:54:35.015000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c9b480 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:54:35.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:54:36.612764 kubelet[2722]: E1002 18:54:36.612715 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:37.702851 kubelet[2722]: E1002 18:54:37.702528 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:54:41.614667 kubelet[2722]: E1002 18:54:41.614609 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:42.451563 systemd[1]: Started sshd@26-172.31.16.86:22-139.178.89.65:45866.service. Oct 2 18:54:42.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.86:22-139.178.89.65:45866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:42.453922 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 18:54:42.453993 kernel: audit: type=1130 audit(1696272882.451:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.86:22-139.178.89.65:45866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:42.632000 audit[3604]: USER_ACCT pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.637065 sshd[3604]: Accepted publickey for core from 139.178.89.65 port 45866 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:42.640961 sshd[3604]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:42.636000 audit[3604]: CRED_ACQ pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.653126 kernel: audit: type=1101 audit(1696272882.632:1360): pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.653270 kernel: audit: type=1103 audit(1696272882.636:1361): pid=3604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.659605 kernel: audit: type=1006 audit(1696272882.636:1362): pid=3604 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 18:54:42.636000 audit[3604]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6761450 a2=3 a3=1 items=0 ppid=1 pid=3604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:42.662350 kernel: audit: type=1300 audit(1696272882.636:1362): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6761450 a2=3 a3=1 items=0 ppid=1 pid=3604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:42.636000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:42.675819 kernel: audit: type=1327 audit(1696272882.636:1362): proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:42.676100 systemd[1]: Started session-27.scope. Oct 2 18:54:42.677401 systemd-logind[1567]: New session 27 of user core. Oct 2 18:54:42.687000 audit[3604]: USER_START pid=3604 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.703521 kernel: audit: type=1105 audit(1696272882.687:1363): pid=3604 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.701000 audit[3607]: CRED_ACQ pid=3607 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.716781 kernel: audit: type=1103 audit(1696272882.701:1364): pid=3607 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.959978 sshd[3604]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:42.961000 audit[3604]: USER_END pid=3604 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.976968 systemd[1]: sshd@26-172.31.16.86:22-139.178.89.65:45866.service: Deactivated successfully. Oct 2 18:54:42.978392 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 18:54:42.961000 audit[3604]: CRED_DISP pid=3604 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.989370 kernel: audit: type=1106 audit(1696272882.961:1365): pid=3604 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.989469 kernel: audit: type=1104 audit(1696272882.961:1366): pid=3604 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:42.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.16.86:22-139.178.89.65:45866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:42.990320 systemd-logind[1567]: Session 27 logged out. Waiting for processes to exit. Oct 2 18:54:42.991849 systemd-logind[1567]: Removed session 27. Oct 2 18:54:46.616381 kubelet[2722]: E1002 18:54:46.616345 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:48.021398 amazon-ssm-agent[1555]: 2023-10-02 18:54:48 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 18:54:48.121844 amazon-ssm-agent[1555]: 2023-10-02 18:54:48 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0c4c9093a3ffcd41a is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0c4c9093a3ffcd41a because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 18:54:48.121844 amazon-ssm-agent[1555]: status code: 400, request id: 909d5852-f0af-4812-a924-d248893b7753 Oct 2 18:54:48.703648 kubelet[2722]: E1002 18:54:48.703576 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-tc5jw_kube-system(f07f720d-792d-435a-8452-fbe26470e49a)\"" pod="kube-system/cilium-tc5jw" podUID=f07f720d-792d-435a-8452-fbe26470e49a Oct 2 18:54:51.618620 kubelet[2722]: E1002 18:54:51.618572 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:52.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.86:22-139.178.89.65:57808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:52.988806 systemd[1]: Started sshd@27-172.31.16.86:22-139.178.89.65:57808.service. Oct 2 18:54:52.991526 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 18:54:52.991645 kernel: audit: type=1130 audit(1696272892.988:1368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.86:22-139.178.89.65:57808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:53.167000 audit[3621]: USER_ACCT pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.168483 sshd[3621]: Accepted publickey for core from 139.178.89.65 port 57808 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:53.180792 kernel: audit: type=1101 audit(1696272893.167:1369): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.180000 audit[3621]: CRED_ACQ pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.182210 sshd[3621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:53.197444 kernel: audit: type=1103 audit(1696272893.180:1370): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.197620 kernel: audit: type=1006 audit(1696272893.180:1371): pid=3621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 18:54:53.210125 kernel: audit: type=1300 audit(1696272893.180:1371): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffefbc3f70 a2=3 a3=1 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:53.180000 audit[3621]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffefbc3f70 a2=3 a3=1 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:53.180000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:53.215111 kernel: audit: type=1327 audit(1696272893.180:1371): proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:53.216894 systemd-logind[1567]: New session 28 of user core. Oct 2 18:54:53.217879 systemd[1]: Started session-28.scope. Oct 2 18:54:53.227000 audit[3621]: USER_START pid=3621 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.241914 kernel: audit: type=1105 audit(1696272893.227:1372): pid=3621 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.242000 audit[3624]: CRED_ACQ pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.253844 kernel: audit: type=1103 audit(1696272893.242:1373): pid=3624 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.514273 sshd[3621]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:53.515000 audit[3621]: USER_END pid=3621 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.521601 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 18:54:53.523325 systemd[1]: sshd@27-172.31.16.86:22-139.178.89.65:57808.service: Deactivated successfully. Oct 2 18:54:53.516000 audit[3621]: CRED_DISP pid=3621 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.537797 kernel: audit: type=1106 audit(1696272893.515:1374): pid=3621 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.537904 kernel: audit: type=1104 audit(1696272893.516:1375): pid=3621 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.537877 systemd-logind[1567]: Session 28 logged out. Waiting for processes to exit. Oct 2 18:54:53.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.16.86:22-139.178.89.65:57808 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:53.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.16.86:22-139.178.89.65:57820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:53.550012 systemd[1]: Started sshd@28-172.31.16.86:22-139.178.89.65:57820.service. Oct 2 18:54:53.552906 systemd-logind[1567]: Removed session 28. Oct 2 18:54:53.730000 audit[3633]: USER_ACCT pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.732518 sshd[3633]: Accepted publickey for core from 139.178.89.65 port 57820 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:53.733000 audit[3633]: CRED_ACQ pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.733000 audit[3633]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff38ebc90 a2=3 a3=1 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:53.733000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:53.735295 sshd[3633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:53.744320 systemd-logind[1567]: New session 29 of user core. Oct 2 18:54:53.745952 systemd[1]: Started session-29.scope. Oct 2 18:54:53.754000 audit[3633]: USER_START pid=3633 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:53.760000 audit[3635]: CRED_ACQ pid=3635 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:56.181379 env[1579]: time="2023-10-02T18:54:56.181218372Z" level=info msg="StopPodSandbox for \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\"" Oct 2 18:54:56.182332 env[1579]: time="2023-10-02T18:54:56.181337794Z" level=info msg="Container to stop \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:54:56.187561 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239-shm.mount: Deactivated successfully. Oct 2 18:54:56.221177 systemd[1]: cri-containerd-85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239.scope: Deactivated successfully. Oct 2 18:54:56.220000 audit: BPF prog-id=126 op=UNLOAD Oct 2 18:54:56.225000 audit: BPF prog-id=129 op=UNLOAD Oct 2 18:54:56.278426 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239-rootfs.mount: Deactivated successfully. Oct 2 18:54:56.295487 env[1579]: time="2023-10-02T18:54:56.295424889Z" level=info msg="shim disconnected" id=85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239 Oct 2 18:54:56.296122 env[1579]: time="2023-10-02T18:54:56.296082830Z" level=warning msg="cleaning up after shim disconnected" id=85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239 namespace=k8s.io Oct 2 18:54:56.296257 env[1579]: time="2023-10-02T18:54:56.296229817Z" level=info msg="cleaning up dead shim" Oct 2 18:54:56.324086 env[1579]: time="2023-10-02T18:54:56.324028298Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3660 runtime=io.containerd.runc.v2\n" Oct 2 18:54:56.324865 env[1579]: time="2023-10-02T18:54:56.324820278Z" level=info msg="TearDown network for sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" successfully" Oct 2 18:54:56.325051 env[1579]: time="2023-10-02T18:54:56.325016116Z" level=info msg="StopPodSandbox for \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" returns successfully" Oct 2 18:54:56.416764 kubelet[2722]: I1002 18:54:56.416396 2722 scope.go:115] "RemoveContainer" containerID="ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921" Oct 2 18:54:56.421823 env[1579]: time="2023-10-02T18:54:56.421721997Z" level=info msg="RemoveContainer for \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\"" Oct 2 18:54:56.427056 env[1579]: time="2023-10-02T18:54:56.426975169Z" level=info msg="RemoveContainer for \"ef1ca16b39587f584d788c2ac58c7d80badcb18875bfd903274dd70cdb95a921\" returns successfully" Oct 2 18:54:56.468092 kubelet[2722]: I1002 18:54:56.467947 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cni-path\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.468357 kubelet[2722]: I1002 18:54:56.468313 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-net\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.468691 kubelet[2722]: I1002 18:54:56.468656 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-cgroup\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.468928 kubelet[2722]: I1002 18:54:56.468893 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-etc-cni-netd\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.469169 kubelet[2722]: I1002 18:54:56.469129 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-run\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.469342 kubelet[2722]: I1002 18:54:56.469320 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-lib-modules\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.469535 kubelet[2722]: I1002 18:54:56.469502 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f07f720d-792d-435a-8452-fbe26470e49a-clustermesh-secrets\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.469710 kubelet[2722]: I1002 18:54:56.469655 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.469847 kubelet[2722]: I1002 18:54:56.469671 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-hubble-tls\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.469847 kubelet[2722]: I1002 18:54:56.469793 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-bpf-maps\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.469847 kubelet[2722]: I1002 18:54:56.469846 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f07f720d-792d-435a-8452-fbe26470e49a-cilium-config-path\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.470043 kubelet[2722]: I1002 18:54:56.469894 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7ptxb\" (UniqueName: \"kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-kube-api-access-7ptxb\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.470043 kubelet[2722]: I1002 18:54:56.469933 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-hostproc\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.470043 kubelet[2722]: I1002 18:54:56.469970 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-xtables-lock\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.470043 kubelet[2722]: I1002 18:54:56.470010 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-kernel\") pod \"f07f720d-792d-435a-8452-fbe26470e49a\" (UID: \"f07f720d-792d-435a-8452-fbe26470e49a\") " Oct 2 18:54:56.470293 kubelet[2722]: I1002 18:54:56.470073 2722 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-etc-cni-netd\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.470293 kubelet[2722]: I1002 18:54:56.470110 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.470293 kubelet[2722]: I1002 18:54:56.468529 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.470293 kubelet[2722]: I1002 18:54:56.470166 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.470293 kubelet[2722]: I1002 18:54:56.468579 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cni-path" (OuterVolumeSpecName: "cni-path") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.470667 kubelet[2722]: I1002 18:54:56.470216 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.470667 kubelet[2722]: W1002 18:54:56.470483 2722 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/f07f720d-792d-435a-8452-fbe26470e49a/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 18:54:56.472158 kubelet[2722]: I1002 18:54:56.472101 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.472403 kubelet[2722]: I1002 18:54:56.472363 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.475372 kubelet[2722]: I1002 18:54:56.475260 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f07f720d-792d-435a-8452-fbe26470e49a-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 18:54:56.475777 kubelet[2722]: I1002 18:54:56.475697 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-hostproc" (OuterVolumeSpecName: "hostproc") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.476049 kubelet[2722]: I1002 18:54:56.475847 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:56.485254 systemd[1]: var-lib-kubelet-pods-f07f720d\x2d792d\x2d435a\x2d8452\x2dfbe26470e49a-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 18:54:56.493879 systemd[1]: var-lib-kubelet-pods-f07f720d\x2d792d\x2d435a\x2d8452\x2dfbe26470e49a-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 18:54:56.497333 kubelet[2722]: I1002 18:54:56.497257 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f07f720d-792d-435a-8452-fbe26470e49a-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 18:54:56.497683 kubelet[2722]: I1002 18:54:56.497650 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:56.499979 kubelet[2722]: I1002 18:54:56.499843 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-kube-api-access-7ptxb" (OuterVolumeSpecName: "kube-api-access-7ptxb") pod "f07f720d-792d-435a-8452-fbe26470e49a" (UID: "f07f720d-792d-435a-8452-fbe26470e49a"). InnerVolumeSpecName "kube-api-access-7ptxb". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:56.501009 systemd[1]: var-lib-kubelet-pods-f07f720d\x2d792d\x2d435a\x2d8452\x2dfbe26470e49a-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7ptxb.mount: Deactivated successfully. Oct 2 18:54:56.570552 kubelet[2722]: I1002 18:54:56.570489 2722 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-bpf-maps\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570552 kubelet[2722]: I1002 18:54:56.570552 2722 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/f07f720d-792d-435a-8452-fbe26470e49a-cilium-config-path\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570580 2722 reconciler.go:399] "Volume detached for volume \"kube-api-access-7ptxb\" (UniqueName: \"kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-kube-api-access-7ptxb\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570604 2722 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-hostproc\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570632 2722 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-xtables-lock\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570656 2722 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-kernel\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570679 2722 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cni-path\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570702 2722 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-host-proc-sys-net\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570724 2722 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-cgroup\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.570825 kubelet[2722]: I1002 18:54:56.570776 2722 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-cilium-run\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.571292 kubelet[2722]: I1002 18:54:56.570799 2722 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f07f720d-792d-435a-8452-fbe26470e49a-lib-modules\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.571292 kubelet[2722]: I1002 18:54:56.570822 2722 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/f07f720d-792d-435a-8452-fbe26470e49a-clustermesh-secrets\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.571292 kubelet[2722]: I1002 18:54:56.570847 2722 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/f07f720d-792d-435a-8452-fbe26470e49a-hubble-tls\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:56.619689 kubelet[2722]: E1002 18:54:56.619656 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:54:56.723274 systemd[1]: Removed slice kubepods-burstable-podf07f720d_792d_435a_8452_fbe26470e49a.slice. Oct 2 18:54:56.798203 kubelet[2722]: I1002 18:54:56.798129 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:54:56.798415 kubelet[2722]: E1002 18:54:56.798237 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798415 kubelet[2722]: E1002 18:54:56.798282 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798415 kubelet[2722]: E1002 18:54:56.798305 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798415 kubelet[2722]: E1002 18:54:56.798325 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798415 kubelet[2722]: E1002 18:54:56.798343 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798415 kubelet[2722]: I1002 18:54:56.798415 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798806 kubelet[2722]: I1002 18:54:56.798455 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798806 kubelet[2722]: I1002 18:54:56.798477 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798806 kubelet[2722]: I1002 18:54:56.798493 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798806 kubelet[2722]: I1002 18:54:56.798509 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798806 kubelet[2722]: I1002 18:54:56.798548 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.798806 kubelet[2722]: E1002 18:54:56.798590 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="f07f720d-792d-435a-8452-fbe26470e49a" containerName="mount-cgroup" Oct 2 18:54:56.809548 systemd[1]: Created slice kubepods-burstable-podbb042747_38fb_4abc_b48f_7fcd822ca003.slice. Oct 2 18:54:56.873385 kubelet[2722]: I1002 18:54:56.873344 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-etc-cni-netd\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.873710 kubelet[2722]: I1002 18:54:56.873687 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cni-path\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.873939 kubelet[2722]: I1002 18:54:56.873917 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-lib-modules\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.874195 kubelet[2722]: I1002 18:54:56.874174 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-xtables-lock\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.874388 kubelet[2722]: I1002 18:54:56.874368 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-config-path\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.874580 kubelet[2722]: I1002 18:54:56.874560 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-net\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.874788 kubelet[2722]: I1002 18:54:56.874767 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pzmmr\" (UniqueName: \"kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-kube-api-access-pzmmr\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.874982 kubelet[2722]: I1002 18:54:56.874962 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-kernel\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.875175 kubelet[2722]: I1002 18:54:56.875149 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-hubble-tls\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.875354 kubelet[2722]: I1002 18:54:56.875335 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-cgroup\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.875622 kubelet[2722]: I1002 18:54:56.875585 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bb042747-38fb-4abc-b48f-7fcd822ca003-clustermesh-secrets\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.875748 kubelet[2722]: I1002 18:54:56.875661 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-run\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.875748 kubelet[2722]: I1002 18:54:56.875713 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-bpf-maps\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:56.875907 kubelet[2722]: I1002 18:54:56.875787 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-hostproc\") pod \"cilium-wkptg\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " pod="kube-system/cilium-wkptg" Oct 2 18:54:57.116804 env[1579]: time="2023-10-02T18:54:57.116266764Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wkptg,Uid:bb042747-38fb-4abc-b48f-7fcd822ca003,Namespace:kube-system,Attempt:0,}" Oct 2 18:54:57.151065 env[1579]: time="2023-10-02T18:54:57.150932515Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:54:57.151065 env[1579]: time="2023-10-02T18:54:57.151009566Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:54:57.151375 env[1579]: time="2023-10-02T18:54:57.151036614Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:54:57.152905 env[1579]: time="2023-10-02T18:54:57.151931348Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47 pid=3688 runtime=io.containerd.runc.v2 Oct 2 18:54:57.190079 systemd[1]: Started cri-containerd-080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47.scope. Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.240000 audit: BPF prog-id=134 op=LOAD Oct 2 18:54:57.241000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.241000 audit[3698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3688 pid=3698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:57.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038306632353132396565333865633561616235343961396664643137 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3688 pid=3698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:57.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038306632353132396565333865633561616235343961396664643137 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.242000 audit: BPF prog-id=135 op=LOAD Oct 2 18:54:57.242000 audit[3698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3688 pid=3698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:57.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038306632353132396565333865633561616235343961396664643137 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.244000 audit: BPF prog-id=136 op=LOAD Oct 2 18:54:57.244000 audit[3698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3688 pid=3698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:57.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038306632353132396565333865633561616235343961396664643137 Oct 2 18:54:57.245000 audit: BPF prog-id=136 op=UNLOAD Oct 2 18:54:57.245000 audit: BPF prog-id=135 op=UNLOAD Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { perfmon } for pid=3698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit[3698]: AVC avc: denied { bpf } for pid=3698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:54:57.245000 audit: BPF prog-id=137 op=LOAD Oct 2 18:54:57.245000 audit[3698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3688 pid=3698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:57.245000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038306632353132396565333865633561616235343961396664643137 Oct 2 18:54:57.286394 env[1579]: time="2023-10-02T18:54:57.286317537Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-wkptg,Uid:bb042747-38fb-4abc-b48f-7fcd822ca003,Namespace:kube-system,Attempt:0,} returns sandbox id \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\"" Oct 2 18:54:57.293797 env[1579]: time="2023-10-02T18:54:57.293385883Z" level=info msg="CreateContainer within sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 18:54:57.318898 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount363233618.mount: Deactivated successfully. Oct 2 18:54:57.334837 env[1579]: time="2023-10-02T18:54:57.334759107Z" level=info msg="CreateContainer within sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\"" Oct 2 18:54:57.338125 env[1579]: time="2023-10-02T18:54:57.338044288Z" level=info msg="StartContainer for \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\"" Oct 2 18:54:57.383179 systemd[1]: Started cri-containerd-8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b.scope. Oct 2 18:54:57.439656 systemd[1]: cri-containerd-8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b.scope: Deactivated successfully. Oct 2 18:54:57.471906 env[1579]: time="2023-10-02T18:54:57.471833771Z" level=info msg="shim disconnected" id=8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b Oct 2 18:54:57.472403 env[1579]: time="2023-10-02T18:54:57.472350390Z" level=warning msg="cleaning up after shim disconnected" id=8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b namespace=k8s.io Oct 2 18:54:57.472603 env[1579]: time="2023-10-02T18:54:57.472556176Z" level=info msg="cleaning up dead shim" Oct 2 18:54:57.517487 env[1579]: time="2023-10-02T18:54:57.517421879Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3746 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:54:57Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:54:57.518237 env[1579]: time="2023-10-02T18:54:57.518138320Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 18:54:57.521195 env[1579]: time="2023-10-02T18:54:57.518847596Z" level=error msg="Failed to pipe stderr of container \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\"" error="reading from a closed fifo" Oct 2 18:54:57.521441 env[1579]: time="2023-10-02T18:54:57.520786836Z" level=error msg="Failed to pipe stdout of container \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\"" error="reading from a closed fifo" Oct 2 18:54:57.523274 env[1579]: time="2023-10-02T18:54:57.523193350Z" level=error msg="StartContainer for \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:54:57.523896 kubelet[2722]: E1002 18:54:57.523817 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b" Oct 2 18:54:57.524473 kubelet[2722]: E1002 18:54:57.524067 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:54:57.524473 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:54:57.524473 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:54:57.524473 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pzmmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkptg_kube-system(bb042747-38fb-4abc-b48f-7fcd822ca003): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:54:57.524948 kubelet[2722]: E1002 18:54:57.524523 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkptg" podUID=bb042747-38fb-4abc-b48f-7fcd822ca003 Oct 2 18:54:57.560991 env[1579]: time="2023-10-02T18:54:57.560934045Z" level=info msg="StopContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" with timeout 30 (s)" Oct 2 18:54:57.561855 env[1579]: time="2023-10-02T18:54:57.561781224Z" level=info msg="Stop container \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" with signal terminated" Oct 2 18:54:57.592169 systemd[1]: cri-containerd-0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295.scope: Deactivated successfully. Oct 2 18:54:57.590000 audit: BPF prog-id=130 op=UNLOAD Oct 2 18:54:57.595000 audit: BPF prog-id=133 op=UNLOAD Oct 2 18:54:57.664784 env[1579]: time="2023-10-02T18:54:57.662974238Z" level=info msg="shim disconnected" id=0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295 Oct 2 18:54:57.664784 env[1579]: time="2023-10-02T18:54:57.663043513Z" level=warning msg="cleaning up after shim disconnected" id=0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295 namespace=k8s.io Oct 2 18:54:57.664784 env[1579]: time="2023-10-02T18:54:57.663066133Z" level=info msg="cleaning up dead shim" Oct 2 18:54:57.697085 env[1579]: time="2023-10-02T18:54:57.697010404Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3779 runtime=io.containerd.runc.v2\n" Oct 2 18:54:57.700139 env[1579]: time="2023-10-02T18:54:57.700057556Z" level=info msg="StopContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" returns successfully" Oct 2 18:54:57.701411 env[1579]: time="2023-10-02T18:54:57.701340894Z" level=info msg="StopPodSandbox for \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\"" Oct 2 18:54:57.701586 env[1579]: time="2023-10-02T18:54:57.701448857Z" level=info msg="Container to stop \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:54:57.723955 systemd[1]: cri-containerd-9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869.scope: Deactivated successfully. Oct 2 18:54:57.722000 audit: BPF prog-id=122 op=UNLOAD Oct 2 18:54:57.726000 audit: BPF prog-id=125 op=UNLOAD Oct 2 18:54:57.784988 env[1579]: time="2023-10-02T18:54:57.784911182Z" level=info msg="shim disconnected" id=9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869 Oct 2 18:54:57.785277 env[1579]: time="2023-10-02T18:54:57.784987369Z" level=warning msg="cleaning up after shim disconnected" id=9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869 namespace=k8s.io Oct 2 18:54:57.785277 env[1579]: time="2023-10-02T18:54:57.785010493Z" level=info msg="cleaning up dead shim" Oct 2 18:54:57.814852 env[1579]: time="2023-10-02T18:54:57.814745844Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3811 runtime=io.containerd.runc.v2\n" Oct 2 18:54:57.815406 env[1579]: time="2023-10-02T18:54:57.815354189Z" level=info msg="TearDown network for sandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" successfully" Oct 2 18:54:57.815520 env[1579]: time="2023-10-02T18:54:57.815405753Z" level=info msg="StopPodSandbox for \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" returns successfully" Oct 2 18:54:57.983401 kubelet[2722]: I1002 18:54:57.983268 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-cilium-config-path\") pod \"817e41dc-3a52-4599-aaf0-7cf40ac6f93d\" (UID: \"817e41dc-3a52-4599-aaf0-7cf40ac6f93d\") " Oct 2 18:54:57.983401 kubelet[2722]: I1002 18:54:57.983347 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8cgtt\" (UniqueName: \"kubernetes.io/projected/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-kube-api-access-8cgtt\") pod \"817e41dc-3a52-4599-aaf0-7cf40ac6f93d\" (UID: \"817e41dc-3a52-4599-aaf0-7cf40ac6f93d\") " Oct 2 18:54:57.984978 kubelet[2722]: W1002 18:54:57.984001 2722 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/817e41dc-3a52-4599-aaf0-7cf40ac6f93d/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 18:54:57.989332 kubelet[2722]: I1002 18:54:57.989280 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "817e41dc-3a52-4599-aaf0-7cf40ac6f93d" (UID: "817e41dc-3a52-4599-aaf0-7cf40ac6f93d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 18:54:57.997557 kubelet[2722]: I1002 18:54:57.997499 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-kube-api-access-8cgtt" (OuterVolumeSpecName: "kube-api-access-8cgtt") pod "817e41dc-3a52-4599-aaf0-7cf40ac6f93d" (UID: "817e41dc-3a52-4599-aaf0-7cf40ac6f93d"). InnerVolumeSpecName "kube-api-access-8cgtt". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:58.083914 kubelet[2722]: I1002 18:54:58.083867 2722 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-cilium-config-path\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:58.083914 kubelet[2722]: I1002 18:54:58.083921 2722 reconciler.go:399] "Volume detached for volume \"kube-api-access-8cgtt\" (UniqueName: \"kubernetes.io/projected/817e41dc-3a52-4599-aaf0-7cf40ac6f93d-kube-api-access-8cgtt\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:58.193028 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b-rootfs.mount: Deactivated successfully. Oct 2 18:54:58.193253 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295-rootfs.mount: Deactivated successfully. Oct 2 18:54:58.193396 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869-rootfs.mount: Deactivated successfully. Oct 2 18:54:58.193536 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869-shm.mount: Deactivated successfully. Oct 2 18:54:58.193673 systemd[1]: var-lib-kubelet-pods-817e41dc\x2d3a52\x2d4599\x2daaf0\x2d7cf40ac6f93d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8cgtt.mount: Deactivated successfully. Oct 2 18:54:58.435316 kubelet[2722]: I1002 18:54:58.435256 2722 scope.go:115] "RemoveContainer" containerID="0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295" Oct 2 18:54:58.457527 env[1579]: time="2023-10-02T18:54:58.456049001Z" level=info msg="CreateContainer within sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 18:54:58.465236 env[1579]: time="2023-10-02T18:54:58.465165679Z" level=info msg="RemoveContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\"" Oct 2 18:54:58.481943 env[1579]: time="2023-10-02T18:54:58.480504196Z" level=info msg="RemoveContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" returns successfully" Oct 2 18:54:58.480793 systemd[1]: Removed slice kubepods-besteffort-pod817e41dc_3a52_4599_aaf0_7cf40ac6f93d.slice. Oct 2 18:54:58.487331 kubelet[2722]: I1002 18:54:58.484365 2722 scope.go:115] "RemoveContainer" containerID="0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295" Oct 2 18:54:58.487511 env[1579]: time="2023-10-02T18:54:58.485387882Z" level=error msg="ContainerStatus for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\": not found" Oct 2 18:54:58.494571 kubelet[2722]: E1002 18:54:58.494510 2722 remote_runtime.go:625] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\": not found" containerID="0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295" Oct 2 18:54:58.494776 kubelet[2722]: I1002 18:54:58.494604 2722 pod_container_deletor.go:52] "DeleteContainer returned error" containerID={Type:containerd ID:0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295} err="failed to get container status \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\": rpc error: code = NotFound desc = an error occurred when try to find container \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\": not found" Oct 2 18:54:58.496955 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2756142812.mount: Deactivated successfully. Oct 2 18:54:58.500262 env[1579]: time="2023-10-02T18:54:58.500132802Z" level=info msg="CreateContainer within sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\"" Oct 2 18:54:58.501414 env[1579]: time="2023-10-02T18:54:58.501303450Z" level=info msg="StartContainer for \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\"" Oct 2 18:54:58.574238 systemd[1]: Started cri-containerd-801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8.scope. Oct 2 18:54:58.615083 systemd[1]: cri-containerd-801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8.scope: Deactivated successfully. Oct 2 18:54:58.647256 env[1579]: time="2023-10-02T18:54:58.647173763Z" level=info msg="shim disconnected" id=801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8 Oct 2 18:54:58.647564 env[1579]: time="2023-10-02T18:54:58.647253130Z" level=warning msg="cleaning up after shim disconnected" id=801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8 namespace=k8s.io Oct 2 18:54:58.647564 env[1579]: time="2023-10-02T18:54:58.647278450Z" level=info msg="cleaning up dead shim" Oct 2 18:54:58.678268 env[1579]: time="2023-10-02T18:54:58.678195230Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3848 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:54:58Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:54:58.678795 env[1579]: time="2023-10-02T18:54:58.678677601Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 18:54:58.681872 env[1579]: time="2023-10-02T18:54:58.681804229Z" level=error msg="Failed to pipe stdout of container \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\"" error="reading from a closed fifo" Oct 2 18:54:58.681990 env[1579]: time="2023-10-02T18:54:58.681944591Z" level=error msg="Failed to pipe stderr of container \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\"" error="reading from a closed fifo" Oct 2 18:54:58.687674 env[1579]: time="2023-10-02T18:54:58.687519218Z" level=error msg="StartContainer for \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:54:58.689291 kubelet[2722]: E1002 18:54:58.689229 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8" Oct 2 18:54:58.689938 kubelet[2722]: E1002 18:54:58.689468 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:54:58.689938 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:54:58.689938 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:54:58.689938 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-pzmmr,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-wkptg_kube-system(bb042747-38fb-4abc-b48f-7fcd822ca003): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:54:58.690977 kubelet[2722]: E1002 18:54:58.689561 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-wkptg" podUID=bb042747-38fb-4abc-b48f-7fcd822ca003 Oct 2 18:54:58.711198 env[1579]: time="2023-10-02T18:54:58.710947008Z" level=info msg="StopContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" with timeout 1 (s)" Oct 2 18:54:58.711574 env[1579]: time="2023-10-02T18:54:58.711433351Z" level=error msg="StopContainer for \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\": not found" Oct 2 18:54:58.711674 kubelet[2722]: I1002 18:54:58.711615 2722 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=817e41dc-3a52-4599-aaf0-7cf40ac6f93d path="/var/lib/kubelet/pods/817e41dc-3a52-4599-aaf0-7cf40ac6f93d/volumes" Oct 2 18:54:58.712664 kubelet[2722]: I1002 18:54:58.712632 2722 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=f07f720d-792d-435a-8452-fbe26470e49a path="/var/lib/kubelet/pods/f07f720d-792d-435a-8452-fbe26470e49a/volumes" Oct 2 18:54:58.713500 kubelet[2722]: E1002 18:54:58.713448 2722 remote_runtime.go:505] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295\": not found" containerID="0c652bb9946f987c76e5bdcb92f371b80c3f304305ad17cd98b12ec038aa8295" Oct 2 18:54:58.713952 env[1579]: time="2023-10-02T18:54:58.713907293Z" level=info msg="StopPodSandbox for \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\"" Oct 2 18:54:58.714270 env[1579]: time="2023-10-02T18:54:58.714206282Z" level=info msg="TearDown network for sandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" successfully" Oct 2 18:54:58.714481 env[1579]: time="2023-10-02T18:54:58.714415560Z" level=info msg="StopPodSandbox for \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" returns successfully" Oct 2 18:54:59.193033 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8-rootfs.mount: Deactivated successfully. Oct 2 18:54:59.438814 sshd[3633]: pam_unix(sshd:session): session closed for user core Oct 2 18:54:59.442000 audit[3633]: USER_END pid=3633 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.446454 kernel: kauditd_printk_skb: 72 callbacks suppressed Oct 2 18:54:59.446595 kernel: audit: type=1106 audit(1696272899.442:1407): pid=3633 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.450036 kubelet[2722]: I1002 18:54:59.449982 2722 scope.go:115] "RemoveContainer" containerID="8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b" Oct 2 18:54:59.451543 env[1579]: time="2023-10-02T18:54:59.451162762Z" level=info msg="StopPodSandbox for \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\"" Oct 2 18:54:59.451543 env[1579]: time="2023-10-02T18:54:59.451300653Z" level=info msg="Container to stop \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:54:59.451543 env[1579]: time="2023-10-02T18:54:59.451332260Z" level=info msg="Container to stop \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:54:59.454575 env[1579]: time="2023-10-02T18:54:59.454186119Z" level=info msg="RemoveContainer for \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\"" Oct 2 18:54:59.459530 env[1579]: time="2023-10-02T18:54:59.459476710Z" level=info msg="RemoveContainer for \"8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b\" returns successfully" Oct 2 18:54:59.463846 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47-shm.mount: Deactivated successfully. Oct 2 18:54:59.468460 systemd[1]: sshd@28-172.31.16.86:22-139.178.89.65:57820.service: Deactivated successfully. Oct 2 18:54:59.470380 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 18:54:59.443000 audit[3633]: CRED_DISP pid=3633 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.473363 systemd[1]: session-29.scope: Consumed 2.278s CPU time. Oct 2 18:54:59.483079 kernel: audit: type=1104 audit(1696272899.443:1408): pid=3633 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.494361 kernel: audit: type=1131 audit(1696272899.467:1409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.16.86:22-139.178.89.65:57820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:59.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.16.86:22-139.178.89.65:57820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:59.495395 systemd[1]: cri-containerd-080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47.scope: Deactivated successfully. Oct 2 18:54:59.498612 systemd-logind[1567]: Session 29 logged out. Waiting for processes to exit. Oct 2 18:54:59.509815 systemd[1]: Started sshd@29-172.31.16.86:22-139.178.89.65:40166.service. Oct 2 18:54:59.513665 systemd-logind[1567]: Removed session 29. Oct 2 18:54:59.494000 audit: BPF prog-id=134 op=UNLOAD Oct 2 18:54:59.519844 kernel: audit: type=1334 audit(1696272899.494:1410): prog-id=134 op=UNLOAD Oct 2 18:54:59.519933 kernel: audit: type=1334 audit(1696272899.503:1411): prog-id=137 op=UNLOAD Oct 2 18:54:59.503000 audit: BPF prog-id=137 op=UNLOAD Oct 2 18:54:59.523845 kernel: audit: type=1130 audit(1696272899.508:1412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.86:22-139.178.89.65:40166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:59.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.86:22-139.178.89.65:40166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:54:59.581630 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47-rootfs.mount: Deactivated successfully. Oct 2 18:54:59.609778 env[1579]: time="2023-10-02T18:54:59.609533365Z" level=info msg="shim disconnected" id=080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47 Oct 2 18:54:59.609778 env[1579]: time="2023-10-02T18:54:59.609603589Z" level=warning msg="cleaning up after shim disconnected" id=080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47 namespace=k8s.io Oct 2 18:54:59.609778 env[1579]: time="2023-10-02T18:54:59.609626988Z" level=info msg="cleaning up dead shim" Oct 2 18:54:59.638136 env[1579]: time="2023-10-02T18:54:59.638078148Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:54:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3886 runtime=io.containerd.runc.v2\n" Oct 2 18:54:59.639045 env[1579]: time="2023-10-02T18:54:59.638997639Z" level=info msg="TearDown network for sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" successfully" Oct 2 18:54:59.639210 env[1579]: time="2023-10-02T18:54:59.639175693Z" level=info msg="StopPodSandbox for \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" returns successfully" Oct 2 18:54:59.703000 audit[3871]: USER_ACCT pid=3871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.705467 sshd[3871]: Accepted publickey for core from 139.178.89.65 port 40166 ssh2: RSA SHA256:ePkK8jKoGlhN3AxcTQ2G+RQZHD5kDZhw675IJmRySH8 Oct 2 18:54:59.719779 kernel: audit: type=1101 audit(1696272899.703:1413): pid=3871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.717000 audit[3871]: CRED_ACQ pid=3871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.720764 sshd[3871]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 18:54:59.736248 kernel: audit: type=1103 audit(1696272899.717:1414): pid=3871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.736370 kernel: audit: type=1006 audit(1696272899.718:1415): pid=3871 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 18:54:59.736778 kernel: audit: type=1300 audit(1696272899.718:1415): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6f9daf0 a2=3 a3=1 items=0 ppid=1 pid=3871 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:59.718000 audit[3871]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6f9daf0 a2=3 a3=1 items=0 ppid=1 pid=3871 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:54:59.718000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 18:54:59.751836 systemd-logind[1567]: New session 30 of user core. Oct 2 18:54:59.753395 systemd[1]: Started session-30.scope. Oct 2 18:54:59.761000 audit[3871]: USER_START pid=3871 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.768000 audit[3899]: CRED_ACQ pid=3899 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:54:59.797758 kubelet[2722]: I1002 18:54:59.797492 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-etc-cni-netd\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.797758 kubelet[2722]: I1002 18:54:59.797581 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-xtables-lock\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.797758 kubelet[2722]: I1002 18:54:59.797603 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.797758 kubelet[2722]: I1002 18:54:59.797648 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-cgroup\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.797758 kubelet[2722]: I1002 18:54:59.797660 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.797758 kubelet[2722]: I1002 18:54:59.797695 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cni-path\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.798638 kubelet[2722]: I1002 18:54:59.797817 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-hubble-tls\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.798638 kubelet[2722]: I1002 18:54:59.797861 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-run\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.798638 kubelet[2722]: I1002 18:54:59.797933 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-config-path\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.798638 kubelet[2722]: I1002 18:54:59.797997 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-bpf-maps\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.798638 kubelet[2722]: I1002 18:54:59.798046 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-pzmmr\" (UniqueName: \"kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-kube-api-access-pzmmr\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.798638 kubelet[2722]: I1002 18:54:59.798113 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-kernel\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.799037 kubelet[2722]: I1002 18:54:59.798188 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bb042747-38fb-4abc-b48f-7fcd822ca003-clustermesh-secrets\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.799037 kubelet[2722]: I1002 18:54:59.798254 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-hostproc\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.799037 kubelet[2722]: I1002 18:54:59.798300 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-lib-modules\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.799037 kubelet[2722]: I1002 18:54:59.798367 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-net\") pod \"bb042747-38fb-4abc-b48f-7fcd822ca003\" (UID: \"bb042747-38fb-4abc-b48f-7fcd822ca003\") " Oct 2 18:54:59.799037 kubelet[2722]: I1002 18:54:59.798447 2722 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-etc-cni-netd\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.799037 kubelet[2722]: I1002 18:54:59.798474 2722 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-xtables-lock\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.799411 kubelet[2722]: I1002 18:54:59.798537 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.799411 kubelet[2722]: I1002 18:54:59.797700 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.799541 kubelet[2722]: I1002 18:54:59.799497 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.801778 kubelet[2722]: I1002 18:54:59.799626 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cni-path" (OuterVolumeSpecName: "cni-path") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.801778 kubelet[2722]: I1002 18:54:59.799687 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.801778 kubelet[2722]: I1002 18:54:59.799746 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.801778 kubelet[2722]: W1002 18:54:59.799805 2722 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/bb042747-38fb-4abc-b48f-7fcd822ca003/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 18:54:59.802457 kubelet[2722]: I1002 18:54:59.802394 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-hostproc" (OuterVolumeSpecName: "hostproc") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.802673 kubelet[2722]: I1002 18:54:59.802635 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:54:59.806026 kubelet[2722]: I1002 18:54:59.805975 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 18:54:59.824119 kubelet[2722]: I1002 18:54:59.817058 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:59.824119 kubelet[2722]: I1002 18:54:59.821912 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/bb042747-38fb-4abc-b48f-7fcd822ca003-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 18:54:59.818069 systemd[1]: var-lib-kubelet-pods-bb042747\x2d38fb\x2d4abc\x2db48f\x2d7fcd822ca003-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dpzmmr.mount: Deactivated successfully. Oct 2 18:54:59.818256 systemd[1]: var-lib-kubelet-pods-bb042747\x2d38fb\x2d4abc\x2db48f\x2d7fcd822ca003-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 18:54:59.824790 kubelet[2722]: I1002 18:54:59.824744 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-kube-api-access-pzmmr" (OuterVolumeSpecName: "kube-api-access-pzmmr") pod "bb042747-38fb-4abc-b48f-7fcd822ca003" (UID: "bb042747-38fb-4abc-b48f-7fcd822ca003"). InnerVolumeSpecName "kube-api-access-pzmmr". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:54:59.899595 kubelet[2722]: I1002 18:54:59.899548 2722 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-config-path\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.899863 kubelet[2722]: I1002 18:54:59.899842 2722 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-bpf-maps\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.900007 kubelet[2722]: I1002 18:54:59.899986 2722 reconciler.go:399] "Volume detached for volume \"kube-api-access-pzmmr\" (UniqueName: \"kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-kube-api-access-pzmmr\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.900169 kubelet[2722]: I1002 18:54:59.900150 2722 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-kernel\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.900308 kubelet[2722]: I1002 18:54:59.900288 2722 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-lib-modules\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.900452 kubelet[2722]: I1002 18:54:59.900432 2722 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-host-proc-sys-net\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.900596 kubelet[2722]: I1002 18:54:59.900576 2722 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/bb042747-38fb-4abc-b48f-7fcd822ca003-clustermesh-secrets\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.900754 kubelet[2722]: I1002 18:54:59.900719 2722 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-hostproc\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.900892 kubelet[2722]: I1002 18:54:59.900873 2722 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-cgroup\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.901042 kubelet[2722]: I1002 18:54:59.901023 2722 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cni-path\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.901193 kubelet[2722]: I1002 18:54:59.901174 2722 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/bb042747-38fb-4abc-b48f-7fcd822ca003-hubble-tls\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:54:59.901330 kubelet[2722]: I1002 18:54:59.901310 2722 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/bb042747-38fb-4abc-b48f-7fcd822ca003-cilium-run\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:55:00.193434 systemd[1]: var-lib-kubelet-pods-bb042747\x2d38fb\x2d4abc\x2db48f\x2d7fcd822ca003-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 18:55:00.453901 kubelet[2722]: I1002 18:55:00.453792 2722 scope.go:115] "RemoveContainer" containerID="801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8" Oct 2 18:55:00.462193 env[1579]: time="2023-10-02T18:55:00.461609949Z" level=info msg="RemoveContainer for \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\"" Oct 2 18:55:00.471001 env[1579]: time="2023-10-02T18:55:00.470933209Z" level=info msg="RemoveContainer for \"801f3911affd3585cb0cdf85fd298c855193285bb04d108c0bcfed8716be71d8\" returns successfully" Oct 2 18:55:00.474285 systemd[1]: Removed slice kubepods-burstable-podbb042747_38fb_4abc_b48f_7fcd822ca003.slice. Oct 2 18:55:00.578547 kubelet[2722]: W1002 18:55:00.578446 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podbb042747_38fb_4abc_b48f_7fcd822ca003.slice/cri-containerd-8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b.scope WatchSource:0}: container "8863759d02cd4201aa201268dd787822ec1a482869cc8d349cc4627b9eb23b2b" in namespace "k8s.io": not found Oct 2 18:55:00.707274 kubelet[2722]: I1002 18:55:00.707162 2722 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=bb042747-38fb-4abc-b48f-7fcd822ca003 path="/var/lib/kubelet/pods/bb042747-38fb-4abc-b48f-7fcd822ca003/volumes" Oct 2 18:55:00.971667 kubelet[2722]: I1002 18:55:00.971481 2722 topology_manager.go:205] "Topology Admit Handler" Oct 2 18:55:00.972515 kubelet[2722]: E1002 18:55:00.972481 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="817e41dc-3a52-4599-aaf0-7cf40ac6f93d" containerName="cilium-operator" Oct 2 18:55:00.972670 kubelet[2722]: E1002 18:55:00.972650 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="bb042747-38fb-4abc-b48f-7fcd822ca003" containerName="mount-cgroup" Oct 2 18:55:00.972845 kubelet[2722]: E1002 18:55:00.972823 2722 cpu_manager.go:394] "RemoveStaleState: removing container" podUID="bb042747-38fb-4abc-b48f-7fcd822ca003" containerName="mount-cgroup" Oct 2 18:55:00.973026 kubelet[2722]: I1002 18:55:00.972992 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="817e41dc-3a52-4599-aaf0-7cf40ac6f93d" containerName="cilium-operator" Oct 2 18:55:00.973194 kubelet[2722]: I1002 18:55:00.973173 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="bb042747-38fb-4abc-b48f-7fcd822ca003" containerName="mount-cgroup" Oct 2 18:55:00.973336 kubelet[2722]: I1002 18:55:00.973316 2722 memory_manager.go:345] "RemoveStaleState removing state" podUID="bb042747-38fb-4abc-b48f-7fcd822ca003" containerName="mount-cgroup" Oct 2 18:55:00.985394 systemd[1]: Created slice kubepods-burstable-pod1372cf79_100b_45e7_b75d_53383b28c416.slice. Oct 2 18:55:01.106432 kubelet[2722]: I1002 18:55:01.106375 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-bpf-maps\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106609 kubelet[2722]: I1002 18:55:01.106453 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-etc-cni-netd\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106609 kubelet[2722]: I1002 18:55:01.106503 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-lib-modules\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106609 kubelet[2722]: I1002 18:55:01.106552 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-run\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106609 kubelet[2722]: I1002 18:55:01.106599 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-hubble-tls\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106932 kubelet[2722]: I1002 18:55:01.106657 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-hostproc\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106932 kubelet[2722]: I1002 18:55:01.106705 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1372cf79-100b-45e7-b75d-53383b28c416-cilium-config-path\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106932 kubelet[2722]: I1002 18:55:01.106783 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-cgroup\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106932 kubelet[2722]: I1002 18:55:01.106831 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-net\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106932 kubelet[2722]: I1002 18:55:01.106874 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-kernel\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.106932 kubelet[2722]: I1002 18:55:01.106920 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cni-path\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.107290 kubelet[2722]: I1002 18:55:01.106965 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5tm4g\" (UniqueName: \"kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-kube-api-access-5tm4g\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.107290 kubelet[2722]: I1002 18:55:01.107009 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-cilium-ipsec-secrets\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.107290 kubelet[2722]: I1002 18:55:01.107051 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-clustermesh-secrets\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.107290 kubelet[2722]: I1002 18:55:01.107101 2722 reconciler.go:357] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-xtables-lock\") pod \"cilium-6x6nx\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " pod="kube-system/cilium-6x6nx" Oct 2 18:55:01.298436 env[1579]: time="2023-10-02T18:55:01.297613714Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-6x6nx,Uid:1372cf79-100b-45e7-b75d-53383b28c416,Namespace:kube-system,Attempt:0,}" Oct 2 18:55:01.354832 env[1579]: time="2023-10-02T18:55:01.352246362Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 18:55:01.354832 env[1579]: time="2023-10-02T18:55:01.352328657Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 18:55:01.354832 env[1579]: time="2023-10-02T18:55:01.352355033Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 18:55:01.354832 env[1579]: time="2023-10-02T18:55:01.352636934Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14 pid=3920 runtime=io.containerd.runc.v2 Oct 2 18:55:01.389908 systemd[1]: Started cri-containerd-b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14.scope. Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.432000 audit: BPF prog-id=138 op=LOAD Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3920 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:01.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239376562636366656230333236633732383439643735303036613630 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3920 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:01.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239376562636366656230333236633732383439643735303036613630 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit: BPF prog-id=139 op=LOAD Oct 2 18:55:01.433000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3920 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:01.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239376562636366656230333236633732383439643735303036613630 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit: BPF prog-id=140 op=LOAD Oct 2 18:55:01.433000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3920 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:01.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239376562636366656230333236633732383439643735303036613630 Oct 2 18:55:01.433000 audit: BPF prog-id=140 op=UNLOAD Oct 2 18:55:01.433000 audit: BPF prog-id=139 op=UNLOAD Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { perfmon } for pid=3930 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit[3930]: AVC avc: denied { bpf } for pid=3930 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:55:01.433000 audit: BPF prog-id=141 op=LOAD Oct 2 18:55:01.433000 audit[3930]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3920 pid=3930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:55:01.433000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239376562636366656230333236633732383439643735303036613630 Oct 2 18:55:01.450993 kubelet[2722]: E1002 18:55:01.450958 2722 cadvisor_stats_provider.go:457] "Partial failure issuing cadvisor.ContainerInfoV2" err="partial failures: [\"/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1372cf79_100b_45e7_b75d_53383b28c416.slice/cri-containerd-b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14.scope\": RecentStats: unable to find data in memory cache]" Oct 2 18:55:01.474038 env[1579]: time="2023-10-02T18:55:01.473973032Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-6x6nx,Uid:1372cf79-100b-45e7-b75d-53383b28c416,Namespace:kube-system,Attempt:0,} returns sandbox id \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\"" Oct 2 18:55:01.481228 env[1579]: time="2023-10-02T18:55:01.481170189Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 18:55:01.501600 env[1579]: time="2023-10-02T18:55:01.501536091Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\"" Oct 2 18:55:01.503417 env[1579]: time="2023-10-02T18:55:01.503368485Z" level=info msg="StartContainer for \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\"" Oct 2 18:55:01.546051 systemd[1]: Started cri-containerd-70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef.scope. Oct 2 18:55:01.588670 systemd[1]: cri-containerd-70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef.scope: Deactivated successfully. Oct 2 18:55:01.621229 kubelet[2722]: E1002 18:55:01.621118 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:01.631412 env[1579]: time="2023-10-02T18:55:01.631333102Z" level=info msg="shim disconnected" id=70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef Oct 2 18:55:01.631412 env[1579]: time="2023-10-02T18:55:01.631412541Z" level=warning msg="cleaning up after shim disconnected" id=70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef namespace=k8s.io Oct 2 18:55:01.631771 env[1579]: time="2023-10-02T18:55:01.631435509Z" level=info msg="cleaning up dead shim" Oct 2 18:55:01.658417 env[1579]: time="2023-10-02T18:55:01.658336703Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:55:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3978 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:55:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:55:01.658894 env[1579]: time="2023-10-02T18:55:01.658810398Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 18:55:01.659280 env[1579]: time="2023-10-02T18:55:01.659224046Z" level=error msg="Failed to pipe stdout of container \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\"" error="reading from a closed fifo" Oct 2 18:55:01.659505 env[1579]: time="2023-10-02T18:55:01.659452332Z" level=error msg="Failed to pipe stderr of container \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\"" error="reading from a closed fifo" Oct 2 18:55:01.661835 env[1579]: time="2023-10-02T18:55:01.661763257Z" level=error msg="StartContainer for \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:55:01.662657 kubelet[2722]: E1002 18:55:01.662152 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef" Oct 2 18:55:01.662657 kubelet[2722]: E1002 18:55:01.662281 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:55:01.662657 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:55:01.662657 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:55:01.663069 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5tm4g,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:55:01.663231 kubelet[2722]: E1002 18:55:01.662353 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:02.482181 env[1579]: time="2023-10-02T18:55:02.482100109Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 18:55:02.502983 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount424065140.mount: Deactivated successfully. Oct 2 18:55:02.517144 env[1579]: time="2023-10-02T18:55:02.516920596Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\"" Oct 2 18:55:02.519720 env[1579]: time="2023-10-02T18:55:02.518218360Z" level=info msg="StartContainer for \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\"" Oct 2 18:55:02.573759 systemd[1]: Started cri-containerd-eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb.scope. Oct 2 18:55:02.614486 systemd[1]: cri-containerd-eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb.scope: Deactivated successfully. Oct 2 18:55:02.635700 env[1579]: time="2023-10-02T18:55:02.635608198Z" level=info msg="shim disconnected" id=eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb Oct 2 18:55:02.635700 env[1579]: time="2023-10-02T18:55:02.635690337Z" level=warning msg="cleaning up after shim disconnected" id=eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb namespace=k8s.io Oct 2 18:55:02.636112 env[1579]: time="2023-10-02T18:55:02.635716701Z" level=info msg="cleaning up dead shim" Oct 2 18:55:02.663221 env[1579]: time="2023-10-02T18:55:02.663147443Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:55:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4016 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:55:02Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:55:02.663751 env[1579]: time="2023-10-02T18:55:02.663638898Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 18:55:02.664968 env[1579]: time="2023-10-02T18:55:02.664907994Z" level=error msg="Failed to pipe stderr of container \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\"" error="reading from a closed fifo" Oct 2 18:55:02.665241 env[1579]: time="2023-10-02T18:55:02.665175819Z" level=error msg="Failed to pipe stdout of container \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\"" error="reading from a closed fifo" Oct 2 18:55:02.667276 env[1579]: time="2023-10-02T18:55:02.667201508Z" level=error msg="StartContainer for \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:55:02.667775 kubelet[2722]: E1002 18:55:02.667532 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb" Oct 2 18:55:02.667775 kubelet[2722]: E1002 18:55:02.667680 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:55:02.667775 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:55:02.667775 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:55:02.669060 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5tm4g,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:55:02.669252 kubelet[2722]: E1002 18:55:02.668167 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:03.238393 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb-rootfs.mount: Deactivated successfully. Oct 2 18:55:03.465892 kubelet[2722]: I1002 18:55:03.465858 2722 scope.go:115] "RemoveContainer" containerID="70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef" Oct 2 18:55:03.466317 kubelet[2722]: I1002 18:55:03.466265 2722 scope.go:115] "RemoveContainer" containerID="70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef" Oct 2 18:55:03.468842 env[1579]: time="2023-10-02T18:55:03.468779427Z" level=info msg="RemoveContainer for \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\"" Oct 2 18:55:03.470140 env[1579]: time="2023-10-02T18:55:03.470077418Z" level=info msg="RemoveContainer for \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\"" Oct 2 18:55:03.470348 env[1579]: time="2023-10-02T18:55:03.470225953Z" level=error msg="RemoveContainer for \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\" failed" error="failed to set removing state for container \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\": container is already in removing state" Oct 2 18:55:03.470510 kubelet[2722]: E1002 18:55:03.470469 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\": container is already in removing state" containerID="70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef" Oct 2 18:55:03.470633 kubelet[2722]: E1002 18:55:03.470531 2722 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef": container is already in removing state; Skipping pod "cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)" Oct 2 18:55:03.471052 kubelet[2722]: E1002 18:55:03.471018 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:03.475781 env[1579]: time="2023-10-02T18:55:03.475668058Z" level=info msg="RemoveContainer for \"70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef\" returns successfully" Oct 2 18:55:04.472392 kubelet[2722]: E1002 18:55:04.472337 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:04.737208 kubelet[2722]: W1002 18:55:04.737079 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1372cf79_100b_45e7_b75d_53383b28c416.slice/cri-containerd-70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef.scope WatchSource:0}: container "70197e69d5810cc2df5ccfecc7711335191027899b5c112567eb32d613f73fef" in namespace "k8s.io": not found Oct 2 18:55:06.622603 kubelet[2722]: E1002 18:55:06.622554 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:07.846089 kubelet[2722]: W1002 18:55:07.846027 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1372cf79_100b_45e7_b75d_53383b28c416.slice/cri-containerd-eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb.scope WatchSource:0}: task eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb not found: not found Oct 2 18:55:11.624188 kubelet[2722]: E1002 18:55:11.624150 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:16.626715 kubelet[2722]: E1002 18:55:16.626677 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:19.707770 env[1579]: time="2023-10-02T18:55:19.705505452Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 18:55:19.726082 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4138670498.mount: Deactivated successfully. Oct 2 18:55:19.727944 env[1579]: time="2023-10-02T18:55:19.727834061Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\"" Oct 2 18:55:19.729304 env[1579]: time="2023-10-02T18:55:19.729232916Z" level=info msg="StartContainer for \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\"" Oct 2 18:55:19.805506 systemd[1]: Started cri-containerd-8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7.scope. Oct 2 18:55:19.823594 systemd[1]: run-containerd-runc-k8s.io-8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7-runc.qZPcLt.mount: Deactivated successfully. Oct 2 18:55:19.859786 systemd[1]: cri-containerd-8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7.scope: Deactivated successfully. Oct 2 18:55:19.878689 env[1579]: time="2023-10-02T18:55:19.878605314Z" level=info msg="shim disconnected" id=8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7 Oct 2 18:55:19.878993 env[1579]: time="2023-10-02T18:55:19.878687658Z" level=warning msg="cleaning up after shim disconnected" id=8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7 namespace=k8s.io Oct 2 18:55:19.878993 env[1579]: time="2023-10-02T18:55:19.878710781Z" level=info msg="cleaning up dead shim" Oct 2 18:55:19.904010 env[1579]: time="2023-10-02T18:55:19.903941139Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:55:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4056 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:55:19Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:55:19.904493 env[1579]: time="2023-10-02T18:55:19.904392612Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 18:55:19.908053 env[1579]: time="2023-10-02T18:55:19.907988040Z" level=error msg="Failed to pipe stdout of container \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\"" error="reading from a closed fifo" Oct 2 18:55:19.908219 env[1579]: time="2023-10-02T18:55:19.908095727Z" level=error msg="Failed to pipe stderr of container \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\"" error="reading from a closed fifo" Oct 2 18:55:19.910471 env[1579]: time="2023-10-02T18:55:19.910380427Z" level=error msg="StartContainer for \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:55:19.910747 kubelet[2722]: E1002 18:55:19.910692 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7" Oct 2 18:55:19.912821 kubelet[2722]: E1002 18:55:19.910854 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:55:19.912821 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:55:19.912821 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:55:19.912821 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5tm4g,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:55:19.913213 kubelet[2722]: E1002 18:55:19.910914 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:20.517080 kubelet[2722]: I1002 18:55:20.517046 2722 scope.go:115] "RemoveContainer" containerID="eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb" Oct 2 18:55:20.517923 kubelet[2722]: I1002 18:55:20.517868 2722 scope.go:115] "RemoveContainer" containerID="eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb" Oct 2 18:55:20.519804 env[1579]: time="2023-10-02T18:55:20.519721598Z" level=info msg="RemoveContainer for \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\"" Oct 2 18:55:20.521143 env[1579]: time="2023-10-02T18:55:20.521082581Z" level=info msg="RemoveContainer for \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\"" Oct 2 18:55:20.521310 env[1579]: time="2023-10-02T18:55:20.521226412Z" level=error msg="RemoveContainer for \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\" failed" error="failed to set removing state for container \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\": container is already in removing state" Oct 2 18:55:20.521619 kubelet[2722]: E1002 18:55:20.521590 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\": container is already in removing state" containerID="eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb" Oct 2 18:55:20.521830 kubelet[2722]: E1002 18:55:20.521808 2722 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb": container is already in removing state; Skipping pod "cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)" Oct 2 18:55:20.522376 kubelet[2722]: E1002 18:55:20.522349 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:20.539795 env[1579]: time="2023-10-02T18:55:20.537623991Z" level=info msg="RemoveContainer for \"eb13b1833c5e5ba795812d6facda89f71055d4e3d13b00770df391e9f4433aeb\" returns successfully" Oct 2 18:55:20.717611 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7-rootfs.mount: Deactivated successfully. Oct 2 18:55:21.628807 kubelet[2722]: E1002 18:55:21.628719 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:22.985191 kubelet[2722]: W1002 18:55:22.985095 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1372cf79_100b_45e7_b75d_53383b28c416.slice/cri-containerd-8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7.scope WatchSource:0}: task 8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7 not found: not found Oct 2 18:55:26.630535 kubelet[2722]: E1002 18:55:26.630387 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:27.597257 kernel: kauditd_printk_skb: 60 callbacks suppressed Oct 2 18:55:27.597421 kernel: audit: type=1400 audit(1696272927.592:1436): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:27.592000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:27.592000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40010b3ac0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:27.616937 kernel: audit: type=1300 audit(1696272927.592:1436): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40010b3ac0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:27.617058 kernel: audit: type=1327 audit(1696272927.592:1436): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:27.592000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:27.594000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:27.637504 kernel: audit: type=1400 audit(1696272927.594:1437): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:27.637575 kernel: audit: type=1300 audit(1696272927.594:1437): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001c4a0c0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:27.594000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001c4a0c0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:27.594000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:27.660305 kernel: audit: type=1327 audit(1696272927.594:1437): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:31.631486 kubelet[2722]: E1002 18:55:31.631430 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:31.843000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.843000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400b89c720 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:55:31.865864 kernel: audit: type=1400 audit(1696272931.843:1438): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.866002 kernel: audit: type=1300 audit(1696272931.843:1438): arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400b89c720 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:55:31.843000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:55:31.877000 kernel: audit: type=1327 audit(1696272931.843:1438): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:55:31.852000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.887286 kernel: audit: type=1400 audit(1696272931.852:1439): avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.852000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400b89c750 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:55:31.852000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:55:31.858000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.858000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4003c88da0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:55:31.858000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:55:31.858000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.858000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400bae8870 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:55:31.858000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:55:31.881000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.881000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=4003ccc760 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:55:31.881000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:55:31.881000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:31.881000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=52 a1=400bae8a50 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:55:31.881000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:55:32.702987 kubelet[2722]: E1002 18:55:32.702934 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:34.995000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:34.998118 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 18:55:34.998232 kernel: audit: type=1400 audit(1696272934.995:1444): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:34.995000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:35.017291 kernel: audit: type=1400 audit(1696272934.995:1445): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:35.017394 kernel: audit: type=1300 audit(1696272934.995:1445): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40013012e0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:34.995000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=40013012e0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:34.995000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:35.040314 kernel: audit: type=1327 audit(1696272934.995:1445): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:35.040431 kernel: audit: type=1300 audit(1696272934.995:1444): arch=c00000b7 syscall=27 success=no exit=-13 a0=10 a1=400101fe60 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:34.995000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=10 a1=400101fe60 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:34.995000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:35.063449 kernel: audit: type=1327 audit(1696272934.995:1444): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:35.063561 kernel: audit: type=1400 audit(1696272934.998:1446): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:34.998000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:34.998000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=400101fea0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:35.085364 kernel: audit: type=1300 audit(1696272934.998:1446): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=400101fea0 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:35.085465 kernel: audit: type=1327 audit(1696272934.998:1446): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:34.998000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:35.095760 kernel: audit: type=1400 audit(1696272935.017:1447): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:35.017000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:55:35.017000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4001301620 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:55:35.017000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:55:36.284811 env[1579]: time="2023-10-02T18:55:36.284474845Z" level=info msg="StopPodSandbox for \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\"" Oct 2 18:55:36.284811 env[1579]: time="2023-10-02T18:55:36.284628720Z" level=info msg="TearDown network for sandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" successfully" Oct 2 18:55:36.284811 env[1579]: time="2023-10-02T18:55:36.284686272Z" level=info msg="StopPodSandbox for \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" returns successfully" Oct 2 18:55:36.287582 env[1579]: time="2023-10-02T18:55:36.285792907Z" level=info msg="RemovePodSandbox for \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\"" Oct 2 18:55:36.287582 env[1579]: time="2023-10-02T18:55:36.285850182Z" level=info msg="Forcibly stopping sandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\"" Oct 2 18:55:36.287582 env[1579]: time="2023-10-02T18:55:36.285976770Z" level=info msg="TearDown network for sandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" successfully" Oct 2 18:55:36.291223 env[1579]: time="2023-10-02T18:55:36.291162894Z" level=info msg="RemovePodSandbox \"9b233e69b9e2373c2490fc8b50506076f62e60df6cf1c8949480c4e39183d869\" returns successfully" Oct 2 18:55:36.293332 env[1579]: time="2023-10-02T18:55:36.293241836Z" level=info msg="StopPodSandbox for \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\"" Oct 2 18:55:36.293529 env[1579]: time="2023-10-02T18:55:36.293435779Z" level=info msg="TearDown network for sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" successfully" Oct 2 18:55:36.293629 env[1579]: time="2023-10-02T18:55:36.293527975Z" level=info msg="StopPodSandbox for \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" returns successfully" Oct 2 18:55:36.294259 env[1579]: time="2023-10-02T18:55:36.294213052Z" level=info msg="RemovePodSandbox for \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\"" Oct 2 18:55:36.294522 env[1579]: time="2023-10-02T18:55:36.294453363Z" level=info msg="Forcibly stopping sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\"" Oct 2 18:55:36.294922 env[1579]: time="2023-10-02T18:55:36.294879181Z" level=info msg="TearDown network for sandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" successfully" Oct 2 18:55:36.300706 env[1579]: time="2023-10-02T18:55:36.300652942Z" level=info msg="RemovePodSandbox \"85c9aa588e462c893226f9b47c7c39fd8054ccb7e8469760278b64b54e1b0239\" returns successfully" Oct 2 18:55:36.301511 env[1579]: time="2023-10-02T18:55:36.301469058Z" level=info msg="StopPodSandbox for \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\"" Oct 2 18:55:36.301847 env[1579]: time="2023-10-02T18:55:36.301781573Z" level=info msg="TearDown network for sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" successfully" Oct 2 18:55:36.301970 env[1579]: time="2023-10-02T18:55:36.301937080Z" level=info msg="StopPodSandbox for \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" returns successfully" Oct 2 18:55:36.302623 env[1579]: time="2023-10-02T18:55:36.302566669Z" level=info msg="RemovePodSandbox for \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\"" Oct 2 18:55:36.302745 env[1579]: time="2023-10-02T18:55:36.302618329Z" level=info msg="Forcibly stopping sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\"" Oct 2 18:55:36.302867 env[1579]: time="2023-10-02T18:55:36.302804688Z" level=info msg="TearDown network for sandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" successfully" Oct 2 18:55:36.308035 env[1579]: time="2023-10-02T18:55:36.307972764Z" level=info msg="RemovePodSandbox \"080f25129ee38ec5aab549a9fdd17c4c8706ad32e5aed76ddb180a7cf8a80f47\" returns successfully" Oct 2 18:55:36.515622 kubelet[2722]: W1002 18:55:36.515561 2722 machine.go:65] Cannot read vendor id correctly, set empty. Oct 2 18:55:36.632827 kubelet[2722]: E1002 18:55:36.632790 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:41.634239 kubelet[2722]: E1002 18:55:41.634195 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:46.636570 kubelet[2722]: E1002 18:55:46.636300 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:47.706003 env[1579]: time="2023-10-02T18:55:47.705756509Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 18:55:47.731837 env[1579]: time="2023-10-02T18:55:47.731761605Z" level=info msg="CreateContainer within sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\"" Oct 2 18:55:47.733491 env[1579]: time="2023-10-02T18:55:47.733417515Z" level=info msg="StartContainer for \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\"" Oct 2 18:55:47.796877 systemd[1]: Started cri-containerd-0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf.scope. Oct 2 18:55:47.839171 systemd[1]: cri-containerd-0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf.scope: Deactivated successfully. Oct 2 18:55:47.865071 env[1579]: time="2023-10-02T18:55:47.864985581Z" level=info msg="shim disconnected" id=0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf Oct 2 18:55:47.865071 env[1579]: time="2023-10-02T18:55:47.865066305Z" level=warning msg="cleaning up after shim disconnected" id=0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf namespace=k8s.io Oct 2 18:55:47.865443 env[1579]: time="2023-10-02T18:55:47.865089465Z" level=info msg="cleaning up dead shim" Oct 2 18:55:47.891315 env[1579]: time="2023-10-02T18:55:47.891240313Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:55:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4095 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T18:55:47Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 18:55:47.891827 env[1579]: time="2023-10-02T18:55:47.891711875Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 18:55:47.892965 env[1579]: time="2023-10-02T18:55:47.892891615Z" level=error msg="Failed to pipe stderr of container \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\"" error="reading from a closed fifo" Oct 2 18:55:47.893230 env[1579]: time="2023-10-02T18:55:47.893174130Z" level=error msg="Failed to pipe stdout of container \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\"" error="reading from a closed fifo" Oct 2 18:55:47.895462 env[1579]: time="2023-10-02T18:55:47.895397410Z" level=error msg="StartContainer for \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 18:55:47.898395 kubelet[2722]: E1002 18:55:47.896053 2722 remote_runtime.go:474] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf" Oct 2 18:55:47.898395 kubelet[2722]: E1002 18:55:47.896192 2722 kuberuntime_manager.go:862] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.1@sha256:ea2db1ee21b88127b5c18a96ad155c25485d0815a667ef77c2b7c7f31cab601b,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 18:55:47.898395 kubelet[2722]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 18:55:47.898395 kubelet[2722]: rm /hostbin/cilium-mount Oct 2 18:55:47.899258 kubelet[2722]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-5tm4g,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 18:55:47.899378 kubelet[2722]: E1002 18:55:47.896255 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:48.581257 kubelet[2722]: I1002 18:55:48.581196 2722 scope.go:115] "RemoveContainer" containerID="8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7" Oct 2 18:55:48.582166 kubelet[2722]: I1002 18:55:48.582116 2722 scope.go:115] "RemoveContainer" containerID="8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7" Oct 2 18:55:48.585441 env[1579]: time="2023-10-02T18:55:48.585374676Z" level=info msg="RemoveContainer for \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\"" Oct 2 18:55:48.586565 env[1579]: time="2023-10-02T18:55:48.586511936Z" level=info msg="RemoveContainer for \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\"" Oct 2 18:55:48.587056 env[1579]: time="2023-10-02T18:55:48.586975255Z" level=error msg="RemoveContainer for \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\" failed" error="failed to set removing state for container \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\": container is already in removing state" Oct 2 18:55:48.589864 kubelet[2722]: E1002 18:55:48.589809 2722 remote_runtime.go:531] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\": container is already in removing state" containerID="8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7" Oct 2 18:55:48.589864 kubelet[2722]: E1002 18:55:48.589872 2722 kuberuntime_container.go:777] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7": container is already in removing state; Skipping pod "cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)" Oct 2 18:55:48.590328 kubelet[2722]: E1002 18:55:48.590291 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:55:48.591759 env[1579]: time="2023-10-02T18:55:48.591662031Z" level=info msg="RemoveContainer for \"8eba0b08a4b016f812e938b9aea92334f2817ea7ad20dcae74cc5f551f05baf7\" returns successfully" Oct 2 18:55:48.720148 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf-rootfs.mount: Deactivated successfully. Oct 2 18:55:50.970683 kubelet[2722]: W1002 18:55:50.970615 2722 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod1372cf79_100b_45e7_b75d_53383b28c416.slice/cri-containerd-0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf.scope WatchSource:0}: task 0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf not found: not found Oct 2 18:55:51.638809 kubelet[2722]: E1002 18:55:51.638775 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:55:56.640006 kubelet[2722]: E1002 18:55:56.639952 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:01.640874 kubelet[2722]: E1002 18:56:01.640839 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:01.702149 kubelet[2722]: E1002 18:56:01.702097 2722 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-6x6nx_kube-system(1372cf79-100b-45e7-b75d-53383b28c416)\"" pod="kube-system/cilium-6x6nx" podUID=1372cf79-100b-45e7-b75d-53383b28c416 Oct 2 18:56:02.646287 env[1579]: time="2023-10-02T18:56:02.645966413Z" level=info msg="StopPodSandbox for \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\"" Oct 2 18:56:02.646287 env[1579]: time="2023-10-02T18:56:02.646063504Z" level=info msg="Container to stop \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 18:56:02.649061 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14-shm.mount: Deactivated successfully. Oct 2 18:56:02.685193 systemd[1]: cri-containerd-b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14.scope: Deactivated successfully. Oct 2 18:56:02.691110 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 18:56:02.691273 kernel: audit: type=1334 audit(1696272962.684:1448): prog-id=138 op=UNLOAD Oct 2 18:56:02.684000 audit: BPF prog-id=138 op=UNLOAD Oct 2 18:56:02.692000 audit: BPF prog-id=141 op=UNLOAD Oct 2 18:56:02.699781 kernel: audit: type=1334 audit(1696272962.692:1449): prog-id=141 op=UNLOAD Oct 2 18:56:02.760073 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14-rootfs.mount: Deactivated successfully. Oct 2 18:56:02.775648 sshd[3871]: pam_unix(sshd:session): session closed for user core Oct 2 18:56:02.777000 audit[3871]: USER_END pid=3871 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:56:02.789379 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 18:56:02.789757 systemd[1]: session-30.scope: Consumed 1.675s CPU time. Oct 2 18:56:02.777000 audit[3871]: CRED_DISP pid=3871 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:56:02.791306 systemd[1]: sshd@29-172.31.16.86:22-139.178.89.65:40166.service: Deactivated successfully. Oct 2 18:56:02.795095 env[1579]: time="2023-10-02T18:56:02.794999305Z" level=info msg="shim disconnected" id=b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14 Oct 2 18:56:02.795361 env[1579]: time="2023-10-02T18:56:02.795328020Z" level=warning msg="cleaning up after shim disconnected" id=b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14 namespace=k8s.io Oct 2 18:56:02.795514 env[1579]: time="2023-10-02T18:56:02.795485436Z" level=info msg="cleaning up dead shim" Oct 2 18:56:02.801818 kernel: audit: type=1106 audit(1696272962.777:1450): pid=3871 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:56:02.801985 kernel: audit: type=1104 audit(1696272962.777:1451): pid=3871 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 18:56:02.801890 systemd-logind[1567]: Session 30 logged out. Waiting for processes to exit. Oct 2 18:56:02.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.86:22-139.178.89.65:40166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:56:02.811709 kernel: audit: type=1131 audit(1696272962.791:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.16.86:22-139.178.89.65:40166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 18:56:02.812520 systemd-logind[1567]: Removed session 30. Oct 2 18:56:02.834259 env[1579]: time="2023-10-02T18:56:02.834181124Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:56:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4131 runtime=io.containerd.runc.v2\n" Oct 2 18:56:02.834837 env[1579]: time="2023-10-02T18:56:02.834783366Z" level=info msg="TearDown network for sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" successfully" Oct 2 18:56:02.834962 env[1579]: time="2023-10-02T18:56:02.834831486Z" level=info msg="StopPodSandbox for \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" returns successfully" Oct 2 18:56:02.979824 kubelet[2722]: I1002 18:56:02.979694 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-xtables-lock\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.981965 kubelet[2722]: I1002 18:56:02.980887 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cni-path\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.981965 kubelet[2722]: I1002 18:56:02.980979 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-hubble-tls\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.981965 kubelet[2722]: I1002 18:56:02.981053 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-kernel\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.981965 kubelet[2722]: I1002 18:56:02.981172 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1372cf79-100b-45e7-b75d-53383b28c416-cilium-config-path\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.981965 kubelet[2722]: I1002 18:56:02.981244 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-clustermesh-secrets\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.981965 kubelet[2722]: I1002 18:56:02.981353 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-cilium-ipsec-secrets\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982427 kubelet[2722]: I1002 18:56:02.981423 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-run\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982427 kubelet[2722]: I1002 18:56:02.981498 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-hostproc\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982427 kubelet[2722]: I1002 18:56:02.981541 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-net\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982427 kubelet[2722]: I1002 18:56:02.981608 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-bpf-maps\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982427 kubelet[2722]: I1002 18:56:02.981672 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-lib-modules\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982427 kubelet[2722]: I1002 18:56:02.981714 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-cgroup\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982817 kubelet[2722]: I1002 18:56:02.981785 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-etc-cni-netd\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982817 kubelet[2722]: I1002 18:56:02.981858 2722 reconciler.go:211] "operationExecutor.UnmountVolume started for volume \"kube-api-access-5tm4g\" (UniqueName: \"kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-kube-api-access-5tm4g\") pod \"1372cf79-100b-45e7-b75d-53383b28c416\" (UID: \"1372cf79-100b-45e7-b75d-53383b28c416\") " Oct 2 18:56:02.982949 kubelet[2722]: I1002 18:56:02.979927 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.983019 kubelet[2722]: I1002 18:56:02.982969 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cni-path" (OuterVolumeSpecName: "cni-path") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.983166 kubelet[2722]: I1002 18:56:02.983136 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.983311 kubelet[2722]: I1002 18:56:02.983284 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-hostproc" (OuterVolumeSpecName: "hostproc") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.983469 kubelet[2722]: I1002 18:56:02.983442 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.983620 kubelet[2722]: I1002 18:56:02.983591 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.983805 kubelet[2722]: I1002 18:56:02.983778 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.983968 kubelet[2722]: I1002 18:56:02.983942 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.985628 kubelet[2722]: I1002 18:56:02.984079 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.985948 kubelet[2722]: I1002 18:56:02.985026 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 18:56:02.985948 kubelet[2722]: W1002 18:56:02.985274 2722 empty_dir.go:523] Warning: Failed to clear quota on /var/lib/kubelet/pods/1372cf79-100b-45e7-b75d-53383b28c416/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 18:56:02.994624 systemd[1]: var-lib-kubelet-pods-1372cf79\x2d100b\x2d45e7\x2db75d\x2d53383b28c416-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 18:56:02.995931 kubelet[2722]: I1002 18:56:02.995884 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1372cf79-100b-45e7-b75d-53383b28c416-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 18:56:03.000882 kubelet[2722]: I1002 18:56:03.000817 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:56:03.010111 systemd[1]: var-lib-kubelet-pods-1372cf79\x2d100b\x2d45e7\x2db75d\x2d53383b28c416-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 18:56:03.013603 systemd[1]: var-lib-kubelet-pods-1372cf79\x2d100b\x2d45e7\x2db75d\x2d53383b28c416-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d5tm4g.mount: Deactivated successfully. Oct 2 18:56:03.019088 kubelet[2722]: I1002 18:56:03.018983 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-kube-api-access-5tm4g" (OuterVolumeSpecName: "kube-api-access-5tm4g") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "kube-api-access-5tm4g". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 18:56:03.019285 kubelet[2722]: I1002 18:56:03.019241 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 18:56:03.022572 kubelet[2722]: I1002 18:56:03.022525 2722 operation_generator.go:890] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "1372cf79-100b-45e7-b75d-53383b28c416" (UID: "1372cf79-100b-45e7-b75d-53383b28c416"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 18:56:03.082784 kubelet[2722]: I1002 18:56:03.082716 2722 reconciler.go:399] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-etc-cni-netd\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.082941 kubelet[2722]: I1002 18:56:03.082792 2722 reconciler.go:399] "Volume detached for volume \"kube-api-access-5tm4g\" (UniqueName: \"kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-kube-api-access-5tm4g\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.082941 kubelet[2722]: I1002 18:56:03.082824 2722 reconciler.go:399] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-xtables-lock\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.082941 kubelet[2722]: I1002 18:56:03.082847 2722 reconciler.go:399] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cni-path\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.082941 kubelet[2722]: I1002 18:56:03.082872 2722 reconciler.go:399] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/1372cf79-100b-45e7-b75d-53383b28c416-hubble-tls\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.082941 kubelet[2722]: I1002 18:56:03.082897 2722 reconciler.go:399] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-kernel\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.082941 kubelet[2722]: I1002 18:56:03.082920 2722 reconciler.go:399] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/1372cf79-100b-45e7-b75d-53383b28c416-cilium-config-path\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.082941 kubelet[2722]: I1002 18:56:03.082943 2722 reconciler.go:399] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-clustermesh-secrets\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.083354 kubelet[2722]: I1002 18:56:03.082965 2722 reconciler.go:399] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-run\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.083354 kubelet[2722]: I1002 18:56:03.082988 2722 reconciler.go:399] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-hostproc\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.083354 kubelet[2722]: I1002 18:56:03.083011 2722 reconciler.go:399] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/1372cf79-100b-45e7-b75d-53383b28c416-cilium-ipsec-secrets\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.083354 kubelet[2722]: I1002 18:56:03.083139 2722 reconciler.go:399] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-bpf-maps\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.083354 kubelet[2722]: I1002 18:56:03.083163 2722 reconciler.go:399] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-lib-modules\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.083354 kubelet[2722]: I1002 18:56:03.083204 2722 reconciler.go:399] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-cilium-cgroup\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.083354 kubelet[2722]: I1002 18:56:03.083230 2722 reconciler.go:399] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/1372cf79-100b-45e7-b75d-53383b28c416-host-proc-sys-net\") on node \"ip-172-31-16-86\" DevicePath \"\"" Oct 2 18:56:03.615874 kubelet[2722]: I1002 18:56:03.615840 2722 scope.go:115] "RemoveContainer" containerID="0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf" Oct 2 18:56:03.620191 env[1579]: time="2023-10-02T18:56:03.620081877Z" level=info msg="RemoveContainer for \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\"" Oct 2 18:56:03.624493 systemd[1]: Removed slice kubepods-burstable-pod1372cf79_100b_45e7_b75d_53383b28c416.slice. Oct 2 18:56:03.629799 env[1579]: time="2023-10-02T18:56:03.629607684Z" level=info msg="RemoveContainer for \"0f4efd6b13877885da3f76fb24ea9a0a41bc2c5ead0aac56867e30c252c284bf\" returns successfully" Oct 2 18:56:03.648827 systemd[1]: var-lib-kubelet-pods-1372cf79\x2d100b\x2d45e7\x2db75d\x2d53383b28c416-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 18:56:04.704233 env[1579]: time="2023-10-02T18:56:04.704181601Z" level=info msg="StopPodSandbox for \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\"" Oct 2 18:56:04.705021 env[1579]: time="2023-10-02T18:56:04.704925528Z" level=info msg="TearDown network for sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" successfully" Oct 2 18:56:04.705149 env[1579]: time="2023-10-02T18:56:04.705013283Z" level=info msg="StopPodSandbox for \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" returns successfully" Oct 2 18:56:04.706452 kubelet[2722]: I1002 18:56:04.706419 2722 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=1372cf79-100b-45e7-b75d-53383b28c416 path="/var/lib/kubelet/pods/1372cf79-100b-45e7-b75d-53383b28c416/volumes" Oct 2 18:56:06.642909 kubelet[2722]: E1002 18:56:06.642853 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:11.643916 kubelet[2722]: E1002 18:56:11.643861 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:16.645277 kubelet[2722]: E1002 18:56:16.645243 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:21.647386 kubelet[2722]: E1002 18:56:21.647350 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:26.649694 kubelet[2722]: E1002 18:56:26.649649 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:27.593000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:27.593000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c9b700 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:56:27.617380 kernel: audit: type=1400 audit(1696272987.593:1453): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:27.617464 kernel: audit: type=1300 audit(1696272987.593:1453): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000c9b700 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:56:27.593000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:56:27.593000 audit[2476]: AVC avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:27.638300 kernel: audit: type=1327 audit(1696272987.593:1453): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:56:27.638376 kernel: audit: type=1400 audit(1696272987.593:1454): avc: denied { watch } for pid=2476 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:27.593000 audit[2476]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000b1c990 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:56:27.651861 kernel: audit: type=1300 audit(1696272987.593:1454): arch=c00000b7 syscall=27 success=no exit=-13 a0=e a1=4000b1c990 a2=fc6 a3=0 items=0 ppid=2319 pid=2476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:56:27.593000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:56:27.662674 kernel: audit: type=1327 audit(1696272987.593:1454): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:56:28.070980 systemd[1]: cri-containerd-2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b.scope: Deactivated successfully. Oct 2 18:56:28.071506 systemd[1]: cri-containerd-2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b.scope: Consumed 3.119s CPU time. Oct 2 18:56:28.075000 audit: BPF prog-id=93 op=UNLOAD Oct 2 18:56:28.075000 audit: BPF prog-id=95 op=UNLOAD Oct 2 18:56:28.081844 kernel: audit: type=1334 audit(1696272988.075:1455): prog-id=93 op=UNLOAD Oct 2 18:56:28.081999 kernel: audit: type=1334 audit(1696272988.075:1456): prog-id=95 op=UNLOAD Oct 2 18:56:28.122125 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b-rootfs.mount: Deactivated successfully. Oct 2 18:56:28.146826 env[1579]: time="2023-10-02T18:56:28.146760798Z" level=info msg="shim disconnected" id=2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b Oct 2 18:56:28.147620 env[1579]: time="2023-10-02T18:56:28.147581837Z" level=warning msg="cleaning up after shim disconnected" id=2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b namespace=k8s.io Oct 2 18:56:28.147772 env[1579]: time="2023-10-02T18:56:28.147720713Z" level=info msg="cleaning up dead shim" Oct 2 18:56:28.174461 env[1579]: time="2023-10-02T18:56:28.174403918Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:56:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4161 runtime=io.containerd.runc.v2\n" Oct 2 18:56:28.531527 systemd[1]: cri-containerd-0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb.scope: Deactivated successfully. Oct 2 18:56:28.532107 systemd[1]: cri-containerd-0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb.scope: Consumed 6.396s CPU time. Oct 2 18:56:28.535000 audit: BPF prog-id=85 op=UNLOAD Oct 2 18:56:28.535000 audit: BPF prog-id=110 op=UNLOAD Oct 2 18:56:28.541880 kernel: audit: type=1334 audit(1696272988.535:1457): prog-id=85 op=UNLOAD Oct 2 18:56:28.542045 kernel: audit: type=1334 audit(1696272988.535:1458): prog-id=110 op=UNLOAD Oct 2 18:56:28.588841 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb-rootfs.mount: Deactivated successfully. Oct 2 18:56:28.602400 env[1579]: time="2023-10-02T18:56:28.602326331Z" level=info msg="shim disconnected" id=0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb Oct 2 18:56:28.602683 env[1579]: time="2023-10-02T18:56:28.602399699Z" level=warning msg="cleaning up after shim disconnected" id=0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb namespace=k8s.io Oct 2 18:56:28.602683 env[1579]: time="2023-10-02T18:56:28.602424011Z" level=info msg="cleaning up dead shim" Oct 2 18:56:28.629384 env[1579]: time="2023-10-02T18:56:28.629310496Z" level=warning msg="cleanup warnings time=\"2023-10-02T18:56:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4187 runtime=io.containerd.runc.v2\n" Oct 2 18:56:28.675408 kubelet[2722]: I1002 18:56:28.672950 2722 scope.go:115] "RemoveContainer" containerID="2d3d437bc390143340719599f6b54f24516a7bab0be0df7d762e0401dcefcf3b" Oct 2 18:56:28.678249 env[1579]: time="2023-10-02T18:56:28.678195700Z" level=info msg="CreateContainer within sandbox \"331ad58d674e1af52aaf64fe37bc6081ea6217c394bf784432d8b6e0a13bedfb\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 18:56:28.679497 kubelet[2722]: I1002 18:56:28.679432 2722 scope.go:115] "RemoveContainer" containerID="0aed5207f97052d833e7ee64d5740dd68f4526a7e32acbd3b32c8de45180b3bb" Oct 2 18:56:28.683918 env[1579]: time="2023-10-02T18:56:28.683839008Z" level=info msg="CreateContainer within sandbox \"f77a9ecf1ff1b8aab1c5a61136d22e34f940db9a58825c878dd2de10995c8a3f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 18:56:28.698371 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3010379183.mount: Deactivated successfully. Oct 2 18:56:28.715922 env[1579]: time="2023-10-02T18:56:28.715834561Z" level=info msg="CreateContainer within sandbox \"331ad58d674e1af52aaf64fe37bc6081ea6217c394bf784432d8b6e0a13bedfb\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"5ef35b114fa0a68d5c87a3845b293fe7890e0ee5b7955902a12d253d712a58db\"" Oct 2 18:56:28.717480 env[1579]: time="2023-10-02T18:56:28.717357504Z" level=info msg="StartContainer for \"5ef35b114fa0a68d5c87a3845b293fe7890e0ee5b7955902a12d253d712a58db\"" Oct 2 18:56:28.727959 env[1579]: time="2023-10-02T18:56:28.727896064Z" level=info msg="CreateContainer within sandbox \"f77a9ecf1ff1b8aab1c5a61136d22e34f940db9a58825c878dd2de10995c8a3f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"2a50d909e83bb942774fd354f5561e2e41f50ceb54581ec912379e1f01076352\"" Oct 2 18:56:28.728942 env[1579]: time="2023-10-02T18:56:28.728868939Z" level=info msg="StartContainer for \"2a50d909e83bb942774fd354f5561e2e41f50ceb54581ec912379e1f01076352\"" Oct 2 18:56:28.779085 systemd[1]: Started cri-containerd-2a50d909e83bb942774fd354f5561e2e41f50ceb54581ec912379e1f01076352.scope. Oct 2 18:56:28.797922 systemd[1]: Started cri-containerd-5ef35b114fa0a68d5c87a3845b293fe7890e0ee5b7955902a12d253d712a58db.scope. Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.841000 audit: BPF prog-id=142 op=LOAD Oct 2 18:56:28.843000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.843000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2319 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261353064393039653833626239343237373466643335346635353631 Oct 2 18:56:28.843000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.843000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2319 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261353064393039653833626239343237373466643335346635353631 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.844000 audit: BPF prog-id=143 op=LOAD Oct 2 18:56:28.844000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2319 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261353064393039653833626239343237373466643335346635353631 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit: BPF prog-id=144 op=LOAD Oct 2 18:56:28.845000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2319 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261353064393039653833626239343237373466643335346635353631 Oct 2 18:56:28.845000 audit: BPF prog-id=144 op=UNLOAD Oct 2 18:56:28.845000 audit: BPF prog-id=143 op=UNLOAD Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { perfmon } for pid=4213 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.849000 audit: BPF prog-id=145 op=LOAD Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2334 pid=4212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663335623131346661306136386435633837613338343562323933 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2334 pid=4212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663335623131346661306136386435633837613338343562323933 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit: BPF prog-id=146 op=LOAD Oct 2 18:56:28.850000 audit[4212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2334 pid=4212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663335623131346661306136386435633837613338343562323933 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.850000 audit: BPF prog-id=147 op=LOAD Oct 2 18:56:28.850000 audit[4212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2334 pid=4212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663335623131346661306136386435633837613338343562323933 Oct 2 18:56:28.851000 audit: BPF prog-id=147 op=UNLOAD Oct 2 18:56:28.851000 audit: BPF prog-id=146 op=UNLOAD Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { perfmon } for pid=4212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit[4212]: AVC avc: denied { bpf } for pid=4212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.851000 audit: BPF prog-id=148 op=LOAD Oct 2 18:56:28.851000 audit[4212]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2334 pid=4212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565663335623131346661306136386435633837613338343562323933 Oct 2 18:56:28.845000 audit[4213]: AVC avc: denied { bpf } for pid=4213 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 18:56:28.845000 audit: BPF prog-id=149 op=LOAD Oct 2 18:56:28.845000 audit[4213]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2319 pid=4213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 18:56:28.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261353064393039653833626239343237373466643335346635353631 Oct 2 18:56:28.921125 env[1579]: time="2023-10-02T18:56:28.921063176Z" level=info msg="StartContainer for \"5ef35b114fa0a68d5c87a3845b293fe7890e0ee5b7955902a12d253d712a58db\" returns successfully" Oct 2 18:56:28.942302 env[1579]: time="2023-10-02T18:56:28.942239909Z" level=info msg="StartContainer for \"2a50d909e83bb942774fd354f5561e2e41f50ceb54581ec912379e1f01076352\" returns successfully" Oct 2 18:56:29.125227 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1544668367.mount: Deactivated successfully. Oct 2 18:56:31.651452 kubelet[2722]: E1002 18:56:31.651419 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:31.844000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=7080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:31.844000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=400ec61350 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:56:31.844000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:56:31.854000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=7089 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:31.854000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=400ec61470 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:56:31.854000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:56:31.862000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:31.862000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=400ee55440 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:56:31.862000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:56:31.863000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:31.863000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=40088f1c20 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:56:31.863000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:56:31.884000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:31.884000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=44 a1=4003fcaf60 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:56:31.884000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:56:31.885000 audit[2503]: AVC avc: denied { watch } for pid=2503 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:31.885000 audit[2503]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=400ee554d0 a2=fc6 a3=0 items=0 ppid=2346 pid=2503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c695,c1000 key=(null) Oct 2 18:56:31.885000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E31362E3836002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Oct 2 18:56:32.131000 audit[4231]: AVC avc: denied { watch } for pid=4231 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=7085 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:32.131000 audit[4231]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40003800c0 a2=fc6 a3=0 items=0 ppid=2319 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:56:32.131000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:56:32.132000 audit[4231]: AVC avc: denied { watch } for pid=4231 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=7078 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 18:56:32.132000 audit[4231]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40004f0e20 a2=fc6 a3=0 items=0 ppid=2319 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c887 key=(null) Oct 2 18:56:32.132000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 18:56:33.439416 kubelet[2722]: E1002 18:56:33.439352 2722 controller.go:187] failed to update lease, error: Put "https://172.31.16.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-86?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 18:56:36.312824 env[1579]: time="2023-10-02T18:56:36.312712204Z" level=info msg="StopPodSandbox for \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\"" Oct 2 18:56:36.313988 env[1579]: time="2023-10-02T18:56:36.313706643Z" level=info msg="TearDown network for sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" successfully" Oct 2 18:56:36.313988 env[1579]: time="2023-10-02T18:56:36.313820979Z" level=info msg="StopPodSandbox for \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" returns successfully" Oct 2 18:56:36.314710 env[1579]: time="2023-10-02T18:56:36.314574171Z" level=info msg="RemovePodSandbox for \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\"" Oct 2 18:56:36.314710 env[1579]: time="2023-10-02T18:56:36.314647527Z" level=info msg="Forcibly stopping sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\"" Oct 2 18:56:36.315037 env[1579]: time="2023-10-02T18:56:36.315001143Z" level=info msg="TearDown network for sandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" successfully" Oct 2 18:56:36.320804 env[1579]: time="2023-10-02T18:56:36.320720041Z" level=info msg="RemovePodSandbox \"b97ebccfeb0326c72849d75006a6060f5a2b0260eea765b4b0175b37fe690e14\" returns successfully" Oct 2 18:56:36.652920 kubelet[2722]: E1002 18:56:36.652804 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:41.655667 kubelet[2722]: E1002 18:56:41.655631 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 18:56:43.440034 kubelet[2722]: E1002 18:56:43.439969 2722 controller.go:187] failed to update lease, error: Put "https://172.31.16.86:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-16-86?timeout=10s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) Oct 2 18:56:46.657507 kubelet[2722]: E1002 18:56:46.657462 2722 kubelet.go:2373] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"